leapfrog-ssl-38.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:98:87:bd:fe:dd:fd:8a:cb:42:71:d8:b7:af:c3:1b:c6:bb was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-38.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:87:bd:fe:dd:fd:8a:cb:42:71:d8:b7:af:c3:1b:c6:bb
Serial Number (int): 313240209860120543853859143106248927069883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:a9:1e:e1:a5:b2:a0:94:c8:73:6b:bd:f3:a0:c8:ad:56:87:61:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:36:8b:f4:c0:c0:1f:5d:ad:78:3d:40:19:1e:05:1a:b6:f3:4f:c1
Fingerprint (sha256): 01:a4:09:37:b9:cd:9b:99:a0:3a:4e:5e:7e:8b:e4:23:c3:1a:93:85:51:cb:9b:50:40:2f:46:fd:92:1e:d5:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-38.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-38.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acelrx.com
acelrxpharmaceuticals.gcs-web.com
agrify.gcs-web.com
albireo.gcs-web.com
altisourceamc.gcs-web.com
americanequity.gcs-web.com
amgen.gcs-web.com
annualmeeting.nextgen.com
arbor.gcs-web.com
bonanzacreekenergyinc.gcs-web.com
certara.gcs-web.com
cloverhealth.gcs-web.com
concentrix.gcs-web.com
contextlogicinc.gcs-web.com
elbitsystems.gcs-web.com
ellingtonfinancial.gcs-web.com
ellingtonresidential.gcs-web.com
eosenergyenterprises.gcs-web.com
equinixinc.gcs-web.com
equitybancsharesinc.gcs-web.com
evelobio.gcs-web.com
firstrepublic.gcs-web.com
fpas.gcs-web.com
greenplainsincv.gcs-web.com
herontherapeutics.gcs-web.com
huttigbuildingproductsinc.gcs-web.com
hydrofarm.gcs-web.com
investor.concentrix.com
investor.equitybank.com
investor.huttig.com
investor.laredopetro.com
investor.nextgen.com
investor.opendoor.com
investor.viatris.com
investors.amgen.com
investors.cloverhealth.com
investors.concentrix.com
investors.eose.com
investors.hydrofarm.com
investors.lsbindustries.com
investors.pactivevergreen.com
investors.pubmatic.com
investors.puretechhealth.com
investors.renasant.com
investors.siogtx.com
investors.telos.com
ir.acelrx.com
ir.agrify.com
ir.albireopharma.com
ir.altisourceamc.com
ir.american-equity.com
ir.arbor.com
ir.bonanzacrk.com
ir.certara.com
ir.concentrix.com
ir.earnreit.com
ir.elbitsystems.com
ir.ellingtonfinancial.com
ir.evelobio.com
ir.firstrepublic.com
ir.forward-pharma.com
ir.herontx.com
ir.nasdaq.com
ir.ntic.com
ir.olema.com
ir.surgerypartners.com
ir.tripadvisor.com
ir.viatris.com
ir.wish.com
laredopetroleum.gcs-web.com
leapfrog-ssl-38.gcs-web.com
lsbindustries.gcs-web.com
maravai.gcs-web.com
nasdaqinc.gcs-web.com
news.firstrepublic.com
news.puretechhealth.com
ntic.gcs-web.com
olema.gcs-web.com
opendoor.gcs-web.com
pactivevergreen.gcs-web.com
pubmaticinc.gcs-web.com
puretechhealth.gcs-web.com
qsii.gcs-web.com
renasant.gcs-web.com
rmg.gcs-web.com
siogtx.gcs-web.com
surgerypartners.gcs-web.com
teloscorp.gcs-web.com
tripadvisor.gcs-web.com
viatris.gcs-web.com
www.acelrx.com
www.investors.pactivevergreen.com
www.rmgacquisition.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-38.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMrzCCC5egAwIBAgISA5iHvf7d/YrLQnHYt6/DG8a7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMjMxNDM3MDZaFw0yMzA0MjMxNDM3MDVaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0zOC5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANSwY2s0OecC2vweYaH/sDSQbk3zOxtVRqpnTrLihHMjKZvo
tDWIP1CmWp/whQbQHGcwcfbP8Tze/eJLANJJaaENPqsfRHhSXXyiFl9dHvr8mAf5
6IBmAJENaRGJbETSd2AZwdi/dCSXqbvqfrWGQDzyXRdvoCHqsXnwf4Be8lfb4hZp
//CIf67J1HKVxtYyBkrw+/T979JeuMWsjiqIV9WtoWSvB2+agEhFS3pebWVQcMqe
uGExJy1IKfUAClBmHtu81Zxppot3asEPhvtMvMUWRnXj8lyvbDbf+ehLVpknolUp
3/Mt/ZlwLODFxCJQxN/BZzcmN1TCiVYvCF29TukCAwEAAaOCCckwggnFMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUNake4aWyoJTIc2u986DIrVaHYTwwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggiKBgNVHREEggiBMIIIfYIKYWNlbHJ4LmNvbYIhYWNl
bHJ4cGhhcm1hY2V1dGljYWxzLmdjcy13ZWIuY29tghJhZ3JpZnkuZ2NzLXdlYi5j
b22CE2FsYmlyZW8uZ2NzLXdlYi5jb22CGWFsdGlzb3VyY2VhbWMuZ2NzLXdlYi5j
b22CGmFtZXJpY2FuZXF1aXR5Lmdjcy13ZWIuY29tghFhbWdlbi5nY3Mtd2ViLmNv
bYIZYW5udWFsbWVldGluZy5uZXh0Z2VuLmNvbYIRYXJib3IuZ2NzLXdlYi5jb22C
IWJvbmFuemFjcmVla2VuZXJneWluYy5nY3Mtd2ViLmNvbYITY2VydGFyYS5nY3Mt
d2ViLmNvbYIYY2xvdmVyaGVhbHRoLmdjcy13ZWIuY29tghZjb25jZW50cml4Lmdj
cy13ZWIuY29tghtjb250ZXh0bG9naWNpbmMuZ2NzLXdlYi5jb22CGGVsYml0c3lz
dGVtcy5nY3Mtd2ViLmNvbYIeZWxsaW5ndG9uZmluYW5jaWFsLmdjcy13ZWIuY29t
giBlbGxpbmd0b25yZXNpZGVudGlhbC5nY3Mtd2ViLmNvbYIgZW9zZW5lcmd5ZW50
ZXJwcmlzZXMuZ2NzLXdlYi5jb22CFmVxdWluaXhpbmMuZ2NzLXdlYi5jb22CH2Vx
dWl0eWJhbmNzaGFyZXNpbmMuZ2NzLXdlYi5jb22CFGV2ZWxvYmlvLmdjcy13ZWIu
Y29tghlmaXJzdHJlcHVibGljLmdjcy13ZWIuY29tghBmcGFzLmdjcy13ZWIuY29t
ghtncmVlbnBsYWluc2luY3YuZ2NzLXdlYi5jb22CHWhlcm9udGhlcmFwZXV0aWNz
Lmdjcy13ZWIuY29tgiVodXR0aWdidWlsZGluZ3Byb2R1Y3RzaW5jLmdjcy13ZWIu
Y29tghVoeWRyb2Zhcm0uZ2NzLXdlYi5jb22CF2ludmVzdG9yLmNvbmNlbnRyaXgu
Y29tghdpbnZlc3Rvci5lcXVpdHliYW5rLmNvbYITaW52ZXN0b3IuaHV0dGlnLmNv
bYIYaW52ZXN0b3IubGFyZWRvcGV0cm8uY29tghRpbnZlc3Rvci5uZXh0Z2VuLmNv
bYIVaW52ZXN0b3Iub3BlbmRvb3IuY29tghRpbnZlc3Rvci52aWF0cmlzLmNvbYIT
aW52ZXN0b3JzLmFtZ2VuLmNvbYIaaW52ZXN0b3JzLmNsb3ZlcmhlYWx0aC5jb22C
GGludmVzdG9ycy5jb25jZW50cml4LmNvbYISaW52ZXN0b3JzLmVvc2UuY29tghdp
bnZlc3RvcnMuaHlkcm9mYXJtLmNvbYIbaW52ZXN0b3JzLmxzYmluZHVzdHJpZXMu
Y29tgh1pbnZlc3RvcnMucGFjdGl2ZXZlcmdyZWVuLmNvbYIWaW52ZXN0b3JzLnB1
Ym1hdGljLmNvbYIcaW52ZXN0b3JzLnB1cmV0ZWNoaGVhbHRoLmNvbYIWaW52ZXN0
b3JzLnJlbmFzYW50LmNvbYIUaW52ZXN0b3JzLnNpb2d0eC5jb22CE2ludmVzdG9y
cy50ZWxvcy5jb22CDWlyLmFjZWxyeC5jb22CDWlyLmFncmlmeS5jb22CFGlyLmFs
YmlyZW9waGFybWEuY29tghRpci5hbHRpc291cmNlYW1jLmNvbYIWaXIuYW1lcmlj
YW4tZXF1aXR5LmNvbYIMaXIuYXJib3IuY29tghFpci5ib25hbnphY3JrLmNvbYIO
aXIuY2VydGFyYS5jb22CEWlyLmNvbmNlbnRyaXguY29tgg9pci5lYXJucmVpdC5j
b22CE2lyLmVsYml0c3lzdGVtcy5jb22CGWlyLmVsbGluZ3RvbmZpbmFuY2lhbC5j
b22CD2lyLmV2ZWxvYmlvLmNvbYIUaXIuZmlyc3RyZXB1YmxpYy5jb22CFWlyLmZv
cndhcmQtcGhhcm1hLmNvbYIOaXIuaGVyb250eC5jb22CDWlyLm5hc2RhcS5jb22C
C2lyLm50aWMuY29tggxpci5vbGVtYS5jb22CFmlyLnN1cmdlcnlwYXJ0bmVycy5j
b22CEmlyLnRyaXBhZHZpc29yLmNvbYIOaXIudmlhdHJpcy5jb22CC2lyLndpc2gu
Y29tghtsYXJlZG9wZXRyb2xldW0uZ2NzLXdlYi5jb22CG2xlYXBmcm9nLXNzbC0z
OC5nY3Mtd2ViLmNvbYIZbHNiaW5kdXN0cmllcy5nY3Mtd2ViLmNvbYITbWFyYXZh
aS5nY3Mtd2ViLmNvbYIVbmFzZGFxaW5jLmdjcy13ZWIuY29tghZuZXdzLmZpcnN0
cmVwdWJsaWMuY29tghduZXdzLnB1cmV0ZWNoaGVhbHRoLmNvbYIQbnRpYy5nY3Mt
d2ViLmNvbYIRb2xlbWEuZ2NzLXdlYi5jb22CFG9wZW5kb29yLmdjcy13ZWIuY29t
ghtwYWN0aXZldmVyZ3JlZW4uZ2NzLXdlYi5jb22CF3B1Ym1hdGljaW5jLmdjcy13
ZWIuY29tghpwdXJldGVjaGhlYWx0aC5nY3Mtd2ViLmNvbYIQcXNpaS5nY3Mtd2Vi
LmNvbYIUcmVuYXNhbnQuZ2NzLXdlYi5jb22CD3JtZy5nY3Mtd2ViLmNvbYISc2lv
Z3R4Lmdjcy13ZWIuY29tghtzdXJnZXJ5cGFydG5lcnMuZ2NzLXdlYi5jb22CFXRl
bG9zY29ycC5nY3Mtd2ViLmNvbYIXdHJpcGFkdmlzb3IuZ2NzLXdlYi5jb22CE3Zp
YXRyaXMuZ2NzLXdlYi5jb22CDnd3dy5hY2VscnguY29tgiF3d3cuaW52ZXN0b3Jz
LnBhY3RpdmV2ZXJncmVlbi5jb22CFnd3dy5ybWdhY3F1aXNpdGlvbi5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggEBAEmL/c4hI4ToDSYSGpnJYX8PkP58/5el1LbRC3P/
uNVlODVKf8ai537L5ZDIdSVQbmu1wsv2HK66gZQaxGOCM2ovGEr8CcodIAqa6UTj
fL4fL5nfeqKnomf9OQQQHFIXhuDu/o9ypH19R2l8VHNgoo6cX9Cje5DbTxT3tHwV
iILnGz71R+z+oWNWe7Ab489T5HzGjKR9sVvdWFe3bGGDG1NUVrvqAiXraRuiYg5+
E7wocKKebz727nRi9MS2V20k2ttT0uaplU2RdFISZ0ag4usuuFw69BQJU44dPksd
zi1hL0nGJh1EF5GjxvaZjLb0U/w76sClpYcorclmmPsWEtY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LBjazQ55wLa/B5hof+w
NJBuTfM7G1VGqmdOsuKEcyMpm+i0NYg/UKZan/CFBtAcZzBx9s/xPN794ksA0klp
oQ0+qx9EeFJdfKIWX10e+vyYB/nogGYAkQ1pEYlsRNJ3YBnB2L90JJepu+p+tYZA
PPJdF2+gIeqxefB/gF7yV9viFmn/8Ih/rsnUcpXG1jIGSvD79P3v0l64xayOKohX
1a2hZK8Hb5qASEVLel5tZVBwyp64YTEnLUgp9QAKUGYe27zVnGmmi3dqwQ+G+0y8
xRZGdePyXK9sNt/56EtWmSeiVSnf8y39mXAs4MXEIlDE38FnNyY3VMKJVi8IXb1O
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313240209860120543853859143106248927069883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 14:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 14:37:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-38.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26849500992236331861704424765129104088017558186806738113718835295686649987120136952501366020436572477055941790691791619974202567851900710975332634449641609503913976411938303512649536160255137629222484111054541314265325436532073108095912397215358389982207152313192575832783413557948670428022335301169575405151776979913761570899411797034252985745857788907789408044847224996714492530953881814219360002743041403391623345467379603432681255556389858167509368685247691468517317294324567962443693146801708884125802951229577221509682692265718955982359704689257812625173674414369296949863394249660029632281168047728281062821609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35a91ee1a5b2a094c8736bbdf3a0c8ad5687613c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acelrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acelrxpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrify.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albireo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altisourceamc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanequity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amgen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualmeeting.nextgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonanzacreekenergyinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certara.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concentrix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contextlogicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbitsystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtonfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtonresidential.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eosenergyenterprises.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equinixinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equitybancsharesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evelobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstrepublic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenplainsincv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttigbuildingproductsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrofarm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.concentrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.equitybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.huttig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.laredopetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.nextgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.opendoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.viatris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cloverhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.concentrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.eose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrofarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lsbindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pactivevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pubmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.puretechhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renasant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.siogtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.telos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acelrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agrify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.albireopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altisourceamc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.american-equity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bonanzacrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.certara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.concentrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.earnreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.elbitsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ellingtonfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evelobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.firstrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.forward-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.herontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nasdaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ntic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.olema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.surgerypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tripadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.viatris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.wish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laredopetroleum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-38.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsbindustries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maravai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasdaqinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.firstrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.puretechhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olema.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pactivevergreen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubmaticinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puretechhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsii.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renasant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmg.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siogtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgerypartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teloscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripadvisor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viatris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acelrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.pactivevergreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmgacquisition.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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