leapfrog-ssl-56.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:6b:5a:32:5b:63:33:90:91:12:39:9f:7a:92:5e:3a:93 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-56.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:6b:5a:32:5b:63:33:90:91:12:39:9f:7a:92:5e:3a:93
Serial Number (int): 391467417682706431441035627752951738415763
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:a2:7f:c8:49:6b:c0:3b:26:0c:7c:36:48:5c:5e:f4:9c:ff:9f:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:23:b8:18:9a:eb:83:82:46:48:12:0e:0e:4b:ea:6e:27:1a:0b:2d
Fingerprint (sha256): 00:d1:5d:4d:89:83:45:3c:13:1d:c3:40:9f:7a:35:1d:e3:93:63:1a:09:e4:6b:36:ab:ed:b6:b3:f5:36:98:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-56.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-56.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abivax.gcs-web.com
adlainortye.gcs-web.com
aoncology.gcs-web.com
asana.gcs-web.com
avientinvestorday2023.gcs-web.com
beazerhomesusainc.gcs-web.com
cervomed.gcs-web.com
cognostherapeutics.gcs-web.com
daviscl.gcs-web.com
dmkpharmaceuticals.gcs-web.com
eaglematerials.gcs-web.com
esgl.gcs-web.com
geturgently.gcs-web.com
helenoftroyinvestorday.gcs-web.com
hffoodsgroup.gcs-web.com
instacart.gcs-web.com
investor.ncratleos.com
investor.ncrvoyix.com
investor.neurometrix.com
investor.silabs.com
investor.xtantmedical.com
investorday.helenoftroy.com
investorday.kennametal.com
investorday.l3harris.com
investorday.ncratleos.com
investorday.payoneer.com
investors.aoncology.com
investors.asana.com
investors.geturgently.com
investors.hffoodsgroup.com
investors.instacart.com
investors.itdev-legendbiotech.com
investors.neonctech.com
investors.nxuenergy.com
investors.onespan.com
investors.ooma.com
investors.rayzebio.com
investors.silvaco.com
investors.spectral-ai.com
investors.xbpeurope.com
investors.xcharge.com
ir.abivax.com
ir.adlainortye.com
ir.beazer.com
ir.cervomed.com
ir.cognosthx.com
ir.daviscl.com
ir.dmkpharmaceuticals.com
ir.eaglematerials.com
ir.esgl.asia
ir.kellyservices.com
ir.lexeotx.com
ir.minervaneurosciences.com
ir.neumoratx.com
ir.richtechrobotics.com
ir.spectaire.com
ir.tourmalinebio.com
ir.vng.com.vn
irday.marriottinternational.com
irday.staar.com
irday.vsecorp.com
kellyservices.gcs-web.com
kennametalinvestorday.gcs-web.com
l3harrisinvestorday.gcs-web.com
leapfrog-ssl-56.gcs-web.com
legendbiotech-preview.gcs-web.com
lexeotherapeutics.gcs-web.com
marriottinvestorday.gcs-web.com
minervaneurosciencesinc.gcs-web.com
moneyhero.gcs-web.com
ncratleos.gcs-web.com
ncratleosinvestorday.gcs-web.com
ncrvoyix.gcs-web.com
neonctechnologies.gcs-web.com
neumoratx.gcs-web.com
neurometrixgcswebcom.gcs-web.com
nxuenergy.gcs-web.com
onespan.gcs-web.com
ooma.gcs-web.com
payoneerinvestorday.gcs-web.com
rayzebio.gcs-web.com
richtechrobotics.gcs-web.com
silabs.gcs-web.com
silvaco.gcs-web.com
spectaire.gcs-web.com
spectralmd.gcs-web.com
staarsurgicalinvestorday.gcs-web.com
sustainabilityday2023.avient.com
tourmalinebio.gcs-web.com
vision2026.staar.com
vngcorp.gcs-web.com
vsecorpinvestorday.gcs-web.com
xbpeurope.gcs-web.com
xcharge.gcs-web.com
xtantmedical.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-56.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDTVlIzXLCFaMcVq3/Ew
xU0QjpUcT/xcnPCo0bri3rrr7/KV225nUD7zdR2bQkGMgsXHuSyvLDfyd5qjdUeG
dseC9lf7cr+l8hAjuATwgQIvGYzjJPTZ7/FreS3uFphndbLIMWGexmk//cUyiQIQ
dIS5UYg2mcpRcx+1DxvC9bnOfDIX5SJQpqDxECrdkTdSa3SocYZFeg7COItMcrTd
f9VY17xbt9WiIVzN52q0EIwDXzO0tCFA9g3CBsqMww+IhZxH2X2+V6B1xihgRLH+
i7X7f22Sw+O7t0mJjMP7PwFfrzYE2BxNXbfdMQmG8i3epd+V5g0pxrWbVXzYyOTe
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391467417682706431441035627752951738415763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 19:24:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 19:24:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-56.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21234088797644393272984182012349086253754357054395757147617672141620969306506336017063044065057416547296897326033638080142295168840251349964188719360980504472316650397913766638600578613158881305606300676352189753598041679367015975243696407542172848263009400688160441948903909336809753939330548071898952706991332817335872246161282892318817534191519092205191822105253398585943191194462014255933776303509729953087810588623413160004100828919660417591282704889272703591259098721542558808913312799071220488279462824136197884987338446644088827949197891177298909683035119921443627491613985589895380525376522247290211803651767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91a27fc8496bc03b260c7c36485c5ef49cff9fbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abivax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlainortye.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avientinvestorday2023.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beazerhomesusainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervomed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognostherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daviscl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmkpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglematerials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geturgently.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helenoftroyinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hffoodsgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instacart.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ncratleos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ncrvoyix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neurometrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.silabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xtantmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.helenoftroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.kennametal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.l3harris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.ncratleos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.payoneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.asana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geturgently.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hffoodsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.instacart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.itdev-legendbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neonctech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nxuenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.onespan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ooma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rayzebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.silvaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.spectral-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xbpeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xcharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.abivax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.adlainortye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.beazer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cervomed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cognosthx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.daviscl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dmkpharmaceuticals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eaglematerials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.esgl.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kellyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lexeotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.minervaneurosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neumoratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.richtechrobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spectaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tourmalinebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vng.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irday.marriottinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irday.staar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irday.vsecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellyservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennametalinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l3harrisinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-56.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendbiotech-preview.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexeotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriottinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minervaneurosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyhero.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncratleos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncratleosinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncrvoyix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonctechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neumoratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurometrixgcswebcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxuenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onespan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ooma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payoneerinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayzebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richtechrobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvaco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectaire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectralmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staarsurgicalinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilityday2023.avient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourmalinebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision2026.staar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vngcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsecorpinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbpeurope.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcharge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtantmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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