leapfrog-ssl-46.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:ba:73:b9:46:52:17:af:75:f9:da:2e:78:00:f5:03:d9 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-46.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:ba:73:b9:46:52:17:af:75:f9:da:2e:78:00:f5:03:d9
Serial Number (int): 282341919456629866524922079487487110349785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:76:93:5a:44:dc:b6:2b:72:75:48:94:97:5b:f0:c4:e1:ef:dc:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:3b:5c:1f:12:da:22:3e:60:cb:72:1b:41:7b:c6:5c:cb:9f:f9:53
Fingerprint (sha256): 02:56:1f:3d:15:ca:55:7d:0d:7a:e1:58:af:3b:f9:af:7c:76:c3:91:72:d1:00:a7:00:63:bd:aa:27:43:09:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-46.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-46.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absci.gcs-web.com
ac.hcnetwork.org
acumenpharm.gcs-web.com
aeye.gcs-web.com
alliancechicago.gcs-web.com
astraspace.gcs-web.com
bbwinc.gcs-web.com
bettertx.gcs-web.com
candeltx.gcs-web.com
cimpressinvestorday.gcs-web.com
cognitiontherapeutics.gcs-web.com
couchbaseinc.gcs-web.com
cvrx.gcs-web.com
digitalbridge.gcs-web.com
elicio.gcs-web.com
epizyme.gcs-web.com
ff.gcs-web.com
finwisebank.gcs-web.com
icosavax.gcs-web.com
imagobio.gcs-web.com
investor.astra.com
investor.renewpower.in
investorday.cimpress.com
investorday2021.oceanfirst.com
investors.absci.com
investors.acumenpharm.com
investors.aeye.ai
investors.bbwinc.com
investors.bettertx.com
investors.couchbase.com
investors.ff.com
investors.finwisebancorp.com
investors.finwisebank.com
investors.icosavax.com
investors.matterport.com
investors.neurelis.com
investors.orangebanktrust.com
investors.outbrain.com
investors.rapidmicrobio.com
investors.ree.auto
investors.sharecare.com
investors.snapone.com
investors.teads.com
investors.tecnoglass.com
investors.waxcenter.com
ir.candeltx.com
ir.cogrx.com
ir.cvrx.com
ir.digitalbridge.com
ir.elicio.com
ir.epizyme.com
ir.huohua.cn
ir.icosavax.com
ir.imagobio.com
ir.linkdoc.com
ir.lucidmotors.com
ir.ozk.com
ir.perspectum.com
ir.pyrogenesis.com
ir.remitly.com
ir.sema4.com
ir.sophiagenetics.com
ir.tangotx.com
ir.ventyxbio.com
leapfrog-ssl-46.gcs-web.com
linkdoc.gcs-web.com
loganridgefinance.gcs-web.com
lucidmotors.gcs-web.com
matterport.gcs-web.com
neurelis.gcs-web.com
oceanfirst.gcs-web.com
orangebanktrust.gcs-web.com
outbrain.gcs-web.com
ozk.gcs-web.com
perspectumdiagnosticsltd.gcs-web.com
pressroom.threevalleycopper.com
pyrogenesis.gcs-web.com
rapidmicrobio.gcs-web.com
reeauto.gcs-web.com
remitly.gcs-web.com
renewpower.gcs-web.com
sema4.gcs-web.com
sharecare.gcs-web.com
snapone.gcs-web.com
sophiagenetics.gcs-web.com
sparkeducation.gcs-web.com
strongbridgebiopharmaplc-redesign.gcs-web.com
strongbridgebiopharmaplc.gcs-web.com
tangotx.gcs-web.com
teads.gcs-web.com
tecnoglass.gcs-web.com
threevalleycopper.gcs-web.com
ventyxbio.gcs-web.com
waxcenter.gcs-web.com
www.bbwinc.com
www.loganridgefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-46.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jqmcKDKPfaygQhoDU5C
gRyxEv7zacLy3iQ0VVm7/MtuRY1YfD2DWsVleSNASDcJ8F0jfn0JJAOeI0Bh4JWF
NOgtrF8j3FjUyz6XsOnFxh6BLZ2IpiXS4jWutc1YwOEFkKOt2joVpbpyUHPCgJ0z
lN/9zfF9vx7nFurS91mKC3NhcUowR+WwnQJ6RjYr0r4Y7Titl2iezSELx2DWfSfB
Z7YEZvH+BsEFV86RyTGLoeULLprOM/ddOsDC1w91PCLAwfi+AKaIjC8np/QfHEz4
BL6+S1mo1Yl39K7Op5fvP+Yp5cGyJXIEB/1qG+Up7Kb9/J9amjv41jAduLlGsH09
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282341919456629866524922079487487110349785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-02 01:24:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 01:24:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27043918732611721578824088365306807767088030962175845395217528684591574741397199189273247740463236537367254843107546858939382889628260802780428141398623158895073528281472985494798611508288767415471060262742967905327935725484689322775200959358004472965368909244797929190120856927334808839004826465016567518784678069674060659396907276657272100606669740576267256275372745785064435812985018676083661979104191027770805132148037981382232508193846991260183257727740804680450276799530732748883263933452480695456292255601085204440671370034015655219564773692606392208839478725948289560917821124031466398119154176980574780865903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2876935a44dcb62b72754894975bf0c4e1efdca3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absci.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.hcnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumenpharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeye.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancechicago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbwinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettertx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candeltx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimpressinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchbaseinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elicio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epizyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finwisebank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icosavax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.astra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.renewpower.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.cimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.oceanfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.absci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acumenpharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aeye.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bettertx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.couchbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.finwisebancorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.finwisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matterport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neurelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orangebanktrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ree.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sharecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.snapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.teads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tecnoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waxcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.candeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cogrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cvrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.digitalbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.elicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.epizyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huohua.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imagobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.linkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucidmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ozk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.perspectum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyrogenesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.remitly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sema4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sophiagenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tangotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ventyxbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdoc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganridgefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matterport.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurelis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanfirst.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangebanktrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrain.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectumdiagnosticsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.threevalleycopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyrogenesis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmicrobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remitly.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sema4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharecare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiagenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkeducation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongbridgebiopharmaplc-redesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongbridgebiopharmaplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnoglass.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threevalleycopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventyxbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waxcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganridgefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001843627cedf0000040300483046022100b4e71f293b4b55736ebbdab32fb213d7815fd5b0954588f2ab07e8cd4e1cf464022100fcb75fc12f5cfafb13b3a005427f93cdcf9aab47b27627c3cc889f8dab3a275e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001843627cef6000004030047304502205411d90c328c6368298db1be3f61529338650d4fefaf22f1bb4a41a0918b4c62022100d5e36696643c899b1c38877f4fd06515ba99d330f35f13db7528704265beb890
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004bf7c0b1718e08e8cb5b7256bfab82a9ce179be25150388bda21bcde4431fcaf873580ac73c122d09f59100878bebc4a122282ccb1e1993ef36269de3eab60ff534262f4509cbdc8581a35a4234f06b046d41655b1af79637963a4567538c56ef7ee3bd915030b2e0e994b6b5022e8f83012033ae0dedcd99dfd23856c6f952c399888cfe52b7972ba9fd1dace8e56b3a3806a0fcb5496f7e69d6984b88cb625260c3b29537078c55f175e2a0c852b51c7550a7f61bd67165ae8bf712cb685e86662f6e4fb2388f07241e708a8a1b9b2dd7c1dada637abd0deb0abda5d79659015c074c5b02c0515d423e5a51938eeb52d077943182ba7730c2e20afd48af71d