leapfrog-ssl-52.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:fb:13:24:7a:77:bb:f7:b7:57:b2:ce:c7:d8:31:3f:8b:53 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-52.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:13:24:7a:77:bb:f7:b7:57:b2:ce:c7:d8:31:3f:8b:53
Serial Number (int): 346773176630983411076584626196312171187027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:f9:7c:0f:c6:1a:f5:db:1c:1f:64:bc:03:99:3f:28:bb:0c:8f:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:c0:24:ab:08:57:12:2e:0f:1f:bc:fc:4b:87:d3:03:4c:03:d2:ee
Fingerprint (sha256): 00:79:4f:ae:39:b5:c5:c4:9e:db:0b:14:93:e7:81:ec:a7:d4:89:05:a4:01:20:e3:71:7a:00:62:af:78:ff:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-52.gcs-web.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-52.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2022investorday.challenger.com.au
an2therapeutics.gcs-web.com
belitebio.gcs-web.com
benefitfocusincinvestorday.gcs-web.com
biohavenpharma.gcs-web.com
bioratherapeutics.gcs-web.com
biote.gcs-web.com
brandday.moltonbrown.co.uk
brightgreen.gcs-web.com
calavo.gcs-web.com
callawaygolfinvestorday.gcs-web.com
challengerinvestorday2022.gcs-web.com
clipmoney.gcs-web.com
cmd.pernod-ricard.com
cmd.st.com
columbiacare.gcs-web.com
comeralifesciences.gcs-web.com
dorchestermineralslp.gcs-web.com
eagleus.gcs-web.com
ecarxgroup.gcs-web.com
eledoninvestorday.gcs-web.com
eleisonpharmaceuticals.gcs-web.com
ellingtonfinancial.gcs-web.com
embectacorp.gcs-web.com
enanta.gcs-web.com
gogoro.gcs-web.com
impelpharma.gcs-web.com
investor.an2therapeutics.com
investor.eagleus.com
investor.gogoro.com
investor.onsemi.com
investor.readingrdi.com
investor.ueresortsinternational.com
investor22.nextgen.com
investorday.benefitfocus.com
investorday.callawaygolf.com
investorday.lantheus.com
investorday.micron.com
investorday.therealreal.com
investorevent22.nextgen.com
investors.belitebio.com
investors.bioratherapeutics.com
investors.brightgreen.us
investors.clipmoney.com
investors.columbia.care
investors.embecta.com
investors.impelpharma.com
investors.ke.com
investors.msprecovery.com
investors.pepgen.com
investors.sentibio.com
investors.swvl.com
investors.telesign.com
ir.biote.com
ir.calavo.com
ir.col-care.com
ir.comeralifesciences.com
ir.ecarxgroup.com
ir.eleison-pharma.com
ir.enanta.com
ir.ke.com
ir.mediacomcable.com
ir.moonlaketx.com
ir.nanobiotix.com
ir.palomarspecialty.com
ir.prenetics.com
ir.rivieraresourcesinc.com
ir.symbotic.com
irday.verramobility.com
keholdings.gcs-web.com
lantheusinvestorday.gcs-web.com
leapfrog-ssl-52.gcs-web.com
mediacomcommunicationscorporation.gcs-web.com
micronirday.gcs-web.com
moltonbrownbrandday.gcs-web.com
moonlaketx.gcs-web.com
msprecovery.gcs-web.com
nanobiotix.gcs-web.com
nextgenhealthcareinvestorday.gcs-web.com
okadamanila.gcs-web.com
onsemi.gcs-web.com
palomarholdingsinc.gcs-web.com
pepgen.gcs-web.com
pernodricard.gcs-web.com
prenetics.gcs-web.com
rdday2022.eledon.com
readingrdi.gcs-web.com
rivieraresources.gcs-web.com
sentibio.gcs-web.com
stmicroelectronicscmd.gcs-web.com
swvl.gcs-web.com
symbotic.gcs-web.com
telesign.gcs-web.com
therealrealinvestorday.gcs-web.com
verramobilityinvestorday.gcs-web.com
www.dmlp.net
www.ellingtonfinancial.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-52.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKrdRtb5XLYrjgNMlwfg
0jlS9DeKKT+o1YNifOzZs1wSAxuvlgB83vORHlpRGyTh+mvcM0pkSHP16pqbU1eI
kV7SlD/zG0ynoY208m/ZzLiKYyv456LJnyNylD4fHQbtOurLRG12k/Df1xljvh7V
ZWilu+Wfis0o2x+5qf8wrxdne+avyEtflnEV6vSml6IiT1OX9bipHwoYG0bxNqiP
oAHy6pb3ltGBqZFacSiGDs2/D7Uuzii6XXv48mzkKhHyDNvODkJZnVdsgtcKS0yz
z4lXbvva6oJu+7ewYZq+gIsXwHn1DRqMAKDNYTMQzGzhWIXN3Gvch9D4BB4m1Ouv
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346773176630983411076584626196312171187027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 22:43:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 22:43:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-52.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24826964130615240926587182880553567017545016138080840037252715935236523672783737524322719955843134571304003482022772212750707996540933225797158111505487571987726684965688454908093987780526100546812683246823793198947020938558821336450251683342995427890643732993284278256683218554996924153314488476408970134634356808785718422757228947841887859397304248063717620274721522324751034110111694664168731951555898849076104600648360165987022977156127882663849231306577944282962850133830244648497675840462668276449227549259136510173938009429101695267743009411229683101104754753141023294727119349029701779908277107092388039077719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ff97c0fc61af5db1c1f64bc03993f28bb0c8fca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'an2therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belitebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitfocusincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biohavenpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biote.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandday.moltonbrown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightgreen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calavo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolfinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday2022.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipmoney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmd.pernod-ricard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmd.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeralifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorchestermineralslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecarxgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eledoninvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleisonpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtonfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embectacorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enanta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.an2therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eagleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gogoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.readingrdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ueresortsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor22.nextgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.benefitfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.lantheus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.micron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorevent22.nextgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.belitebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bioratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brightgreen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clipmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.columbia.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.embecta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.msprecovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pepgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sentibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.telesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.col-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.comeralifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ecarxgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eleison-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mediacomcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.moonlaketx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nanobiotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.palomarspecialty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rivieraresourcesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.symbotic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irday.verramobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantheusinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-52.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacomcommunicationscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micronirday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moltonbrownbrandday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonlaketx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msprecovery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanobiotix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextgenhealthcareinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okadamanila.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palomarholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepgen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pernodricard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdday2022.eledon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingrdi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivieraresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmicroelectronicscmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swvl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symbotic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealrealinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verramobilityinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmlp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellingtonfinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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