leapfrog-ssl-22.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:32:fe:72:56:50:bb:59:2d:cb:37:0d:92:72:b1:66:a4:b2 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-22.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:fe:72:56:50:bb:59:2d:cb:37:0d:92:72:b1:66:a4:b2
Serial Number (int): 365801479656542611784406036312372164338866
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:a2:ce:6c:38:a5:c6:17:1a:8a:94:bd:ca:36:5b:df:f3:58:25:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:38:55:19:43:0d:de:99:65:37:45:fa:b4:c5:ff:ac:a1:3e:fe:e4
Fingerprint (sha256): 03:9f:ae:df:56:bb:33:9e:35:df:a4:49:19:ef:20:7a:bc:d0:55:10:ae:87:77:7b:ef:a2:f5:86:d7:ca:3c:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-22.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-22.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aduro.gcs-web.com
aprea.gcs-web.com
artaratx.gcs-web.com
bakerhughes.gcs-web.com
baldwinriskpartners.gcs-web.com
beamtherapeutics.gcs-web.com
bellushealth.gcs-web.com
callawaygolf.gcs-web.com
cansortium.gcs-web.com
carnivalcorporationplc.gcs-web.com
centogene.gcs-web.com
cnir.fosun.com
davitainc.gcs-web.com
deleklogistics.gcs-web.com
deleklogisticspartnerslp.gcs-web.com
delekus.gcs-web.com
exagen.gcs-web.com
fosuninternational.gcs-web.com
galectintherapeuticsinc.gcs-web.com
galeratherapeutics.gcs-web.com
gatx.gcs-web.com
gbsinc.gcs-web.com
hbtbank.gcs-web.com
hermanmillerinc.gcs-web.com
hess.gcs-web.com
innatepharma.gcs-web.com
investor.adicetbio.com
investor.galectintherapeutics.com
investor.glucosebiosensor.com
investor.onepeloton.com
investor.shutterstock.com
investors.aduro.com
investors.bakerhughes.com
investors.beamtx.com
investors.centogene.com
investors.davita.com
investors.exagen.com
investors.galeratx.com
investors.gbs.inc
investors.getfluent.com
investors.hermanmiller.com
investors.innate-pharma.com
investors.liquidia.com
investors.midlandsb.com
investors.otonomy.com
investors.phathompharma.com
investors.skyworksinc.com
investors.tileshop.com
investors.vincerapharma.com
investors.vincerx.com
investors.vir.bio
ir.aprea.com
ir.artaratx.com
ir.baldwinriskpartners.com
ir.bellushealth.com
ir.callawaygolf.com
ir.fosun.com
ir.gatx.com
ir.hbtfinancial.com
ir.livongo.com
ir.ocugen.com
ir.restorbio.com
ir.rhythmtx.com
ir.rockwellmed.com
ir.saratogainvestmentcorp.com
ir.seacormarine.com
ir.telabio.com
leapfrog-ssl-22.gcs-web.com
liquidia.com
liquidia.gcs-web.com
livongo.gcs-web.com
midlandsb.gcs-web.com
ocugen.gcs-web.com
onepeloton.gcs-web.com
otonomy.gcs-web.com
phathompharmaceuticals.gcs-web.com
restorbioinc.gcs-web.com
rhythmpharmaceuticals.gcs-web.com
rockwellmedicalinc.gcs-web.com
saratogainvestmentcorp.gcs-web.com
seacormarine.gcs-web.com
shutterstock.gcs-web.com
skyworks.gcs-web.com
telabio.gcs-web.com
tileshop.gcs-web.com
twir.fosun.com
vincerapharma.gcs-web.com
vir.gcs-web.com
www.carnivalcorp.com
www.carnivalcorp.us
www.carnivalcorporation.com
www.carnivalplc.com
www.liquidia.com
www.raregenllc.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-22.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM8zCCC9ugAwIBAgISBDL+clZQu1ktyzcNknKxZqSyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMjkxNTM4MjVaFw0yMTA2MjcxNTM4MjVaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0yMi5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwPGMYYUXXz5rl+EHnrIfVNrvFvZ5s8T2mcvWL8HpS0xWB2
FY49mlSUwlj9lfb18xBX16t+CaA9qdUE9JOTNoSXCywXRYE6ZslitDdgfmoMtidK
1U3/ckiM11iPnhWD9m6vIYpl6AgwV9wQOAEgmWruJNg6hIs7t5/eGqhAzHm5QOpm
3Yv4XcfdbVYA1dbc51Vf63qUwMrhbiRPukunyZPpeApGQ3XuN25CW4n8uWf4j0In
LzuPLFVR6wELNUuni6Qn8nJ+tPGrJCnSwmd6GUVsU7+BSW5Vppe4tVM64wKJcMrK
ndZmoHqGMGoU0JjsjdTd4X2zAi9hfjeXVFOKhq0CAwEAAaOCCg0wggoJMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUoqLObDilxhcaipS9yjZb3/NYJVwwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggjOBgNVHREEggjFMIIIwYIRYWR1cm8uZ2NzLXdlYi5j
b22CEWFwcmVhLmdjcy13ZWIuY29tghRhcnRhcmF0eC5nY3Mtd2ViLmNvbYIXYmFr
ZXJodWdoZXMuZ2NzLXdlYi5jb22CH2JhbGR3aW5yaXNrcGFydG5lcnMuZ2NzLXdl
Yi5jb22CHGJlYW10aGVyYXBldXRpY3MuZ2NzLXdlYi5jb22CGGJlbGx1c2hlYWx0
aC5nY3Mtd2ViLmNvbYIYY2FsbGF3YXlnb2xmLmdjcy13ZWIuY29tghZjYW5zb3J0
aXVtLmdjcy13ZWIuY29tgiJjYXJuaXZhbGNvcnBvcmF0aW9ucGxjLmdjcy13ZWIu
Y29tghVjZW50b2dlbmUuZ2NzLXdlYi5jb22CDmNuaXIuZm9zdW4uY29tghVkYXZp
dGFpbmMuZ2NzLXdlYi5jb22CGmRlbGVrbG9naXN0aWNzLmdjcy13ZWIuY29tgiRk
ZWxla2xvZ2lzdGljc3BhcnRuZXJzbHAuZ2NzLXdlYi5jb22CE2RlbGVrdXMuZ2Nz
LXdlYi5jb22CEmV4YWdlbi5nY3Mtd2ViLmNvbYIeZm9zdW5pbnRlcm5hdGlvbmFs
Lmdjcy13ZWIuY29tgiNnYWxlY3RpbnRoZXJhcGV1dGljc2luYy5nY3Mtd2ViLmNv
bYIeZ2FsZXJhdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghBnYXR4Lmdjcy13ZWIu
Y29tghJnYnNpbmMuZ2NzLXdlYi5jb22CE2hidGJhbmsuZ2NzLXdlYi5jb22CG2hl
cm1hbm1pbGxlcmluYy5nY3Mtd2ViLmNvbYIQaGVzcy5nY3Mtd2ViLmNvbYIYaW5u
YXRlcGhhcm1hLmdjcy13ZWIuY29tghZpbnZlc3Rvci5hZGljZXRiaW8uY29tgiFp
bnZlc3Rvci5nYWxlY3RpbnRoZXJhcGV1dGljcy5jb22CHWludmVzdG9yLmdsdWNv
c2ViaW9zZW5zb3IuY29tghdpbnZlc3Rvci5vbmVwZWxvdG9uLmNvbYIZaW52ZXN0
b3Iuc2h1dHRlcnN0b2NrLmNvbYITaW52ZXN0b3JzLmFkdXJvLmNvbYIZaW52ZXN0
b3JzLmJha2VyaHVnaGVzLmNvbYIUaW52ZXN0b3JzLmJlYW10eC5jb22CF2ludmVz
dG9ycy5jZW50b2dlbmUuY29tghRpbnZlc3RvcnMuZGF2aXRhLmNvbYIUaW52ZXN0
b3JzLmV4YWdlbi5jb22CFmludmVzdG9ycy5nYWxlcmF0eC5jb22CEWludmVzdG9y
cy5nYnMuaW5jghdpbnZlc3RvcnMuZ2V0Zmx1ZW50LmNvbYIaaW52ZXN0b3JzLmhl
cm1hbm1pbGxlci5jb22CG2ludmVzdG9ycy5pbm5hdGUtcGhhcm1hLmNvbYIWaW52
ZXN0b3JzLmxpcXVpZGlhLmNvbYIXaW52ZXN0b3JzLm1pZGxhbmRzYi5jb22CFWlu
dmVzdG9ycy5vdG9ub215LmNvbYIbaW52ZXN0b3JzLnBoYXRob21waGFybWEuY29t
ghlpbnZlc3RvcnMuc2t5d29ya3NpbmMuY29tghZpbnZlc3RvcnMudGlsZXNob3Au
Y29tghtpbnZlc3RvcnMudmluY2VyYXBoYXJtYS5jb22CFWludmVzdG9ycy52aW5j
ZXJ4LmNvbYIRaW52ZXN0b3JzLnZpci5iaW+CDGlyLmFwcmVhLmNvbYIPaXIuYXJ0
YXJhdHguY29tghppci5iYWxkd2lucmlza3BhcnRuZXJzLmNvbYITaXIuYmVsbHVz
aGVhbHRoLmNvbYITaXIuY2FsbGF3YXlnb2xmLmNvbYIMaXIuZm9zdW4uY29tggtp
ci5nYXR4LmNvbYITaXIuaGJ0ZmluYW5jaWFsLmNvbYIOaXIubGl2b25nby5jb22C
DWlyLm9jdWdlbi5jb22CEGlyLnJlc3RvcmJpby5jb22CD2lyLnJoeXRobXR4LmNv
bYISaXIucm9ja3dlbGxtZWQuY29tgh1pci5zYXJhdG9nYWludmVzdG1lbnRjb3Jw
LmNvbYITaXIuc2VhY29ybWFyaW5lLmNvbYIOaXIudGVsYWJpby5jb22CG2xlYXBm
cm9nLXNzbC0yMi5nY3Mtd2ViLmNvbYIMbGlxdWlkaWEuY29tghRsaXF1aWRpYS5n
Y3Mtd2ViLmNvbYITbGl2b25nby5nY3Mtd2ViLmNvbYIVbWlkbGFuZHNiLmdjcy13
ZWIuY29tghJvY3VnZW4uZ2NzLXdlYi5jb22CFm9uZXBlbG90b24uZ2NzLXdlYi5j
b22CE290b25vbXkuZ2NzLXdlYi5jb22CInBoYXRob21waGFybWFjZXV0aWNhbHMu
Z2NzLXdlYi5jb22CGHJlc3RvcmJpb2luYy5nY3Mtd2ViLmNvbYIhcmh5dGhtcGhh
cm1hY2V1dGljYWxzLmdjcy13ZWIuY29tgh5yb2Nrd2VsbG1lZGljYWxpbmMuZ2Nz
LXdlYi5jb22CInNhcmF0b2dhaW52ZXN0bWVudGNvcnAuZ2NzLXdlYi5jb22CGHNl
YWNvcm1hcmluZS5nY3Mtd2ViLmNvbYIYc2h1dHRlcnN0b2NrLmdjcy13ZWIuY29t
ghRza3l3b3Jrcy5nY3Mtd2ViLmNvbYITdGVsYWJpby5nY3Mtd2ViLmNvbYIUdGls
ZXNob3AuZ2NzLXdlYi5jb22CDnR3aXIuZm9zdW4uY29tghl2aW5jZXJhcGhhcm1h
Lmdjcy13ZWIuY29tgg92aXIuZ2NzLXdlYi5jb22CFHd3dy5jYXJuaXZhbGNvcnAu
Y29tghN3d3cuY2Fybml2YWxjb3JwLnVzght3d3cuY2Fybml2YWxjb3Jwb3JhdGlv
bi5jb22CE3d3dy5jYXJuaXZhbHBsYy5jb22CEHd3dy5saXF1aWRpYS5jb22CEnd3
dy5yYXJlZ2VubGxjLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKkeC4vHTAwX
jmmFFDnRKPNB7chEzGRAMuBjUoJ1farFOf4k26+wl9vN2y3E3xi1K/uGZzVo7/Ob
SxCUPMEOQKGNtXsvHJBdZGGwRim0zoZvv04Yov6YYck8EKuDwOdfhnU3DInhvgmM
gKkrhWc/cv2HqmTs+A8IfiYGWQtlvsiuiJlRXaXAYkmTiObCmxrw9Es5lk4NLg4S
N8MsjVCWt2yxtc3b67Bo22wXfPokgVRKu+pzQWva7sQaYU4Sx50WlBNdjySQF7m0
+/lIgHiy8T1QM18dK9SsAkX3/fEBOo71PXH9JaZW/LR5CLS7KNmqPwB7Veava1RT
fvjHNbPAKA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA8YxhhRdfPmuX4Qeesh
9U2u8W9nmzxPaZy9YvwelLTFYHYVjj2aVJTCWP2V9vXzEFfXq34JoD2p1QT0k5M2
hJcLLBdFgTpmyWK0N2B+agy2J0rVTf9ySIzXWI+eFYP2bq8himXoCDBX3BA4ASCZ
au4k2DqEizu3n94aqEDMeblA6mbdi/hdx91tVgDV1tznVV/repTAyuFuJE+6S6fJ
k+l4CkZDde43bkJbify5Z/iPQicvO48sVVHrAQs1S6eLpCfycn608askKdLCZ3oZ
RWxTv4FJblWml7i1UzrjAolwysqd1mageoYwahTQmOyN1N3hfbMCL2F+N5dUU4qG
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365801479656542611784406036312372164338866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-29 15:38:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-27 15:38:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19700620070778610621539178258025045651902761837012969362102615683883655370157358579587201378731650795785670257918657674843309256101269100908050352321279326246418030136713995285429467821301481623293818419960807330063540382673874333269747593008842748632975037112129426837176586629782696512586447944884994916485641557673656552262256154911956534785848347195513398353832330521725731289921420518458905560857060577651169501827182347198219300019127831657060400752470450002677688498170527213050921564708558502327290297337723293386085379667255964497289649670457498041465009494949167365852668027648808677258012169445836153587373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2a2ce6c38a5c6171a8a94bdca365bdff358255c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aduro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artaratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinriskpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellushealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cansortium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnivalcorporationplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centogene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnir.fosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davitainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogistics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogisticspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delekus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosuninternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galectintherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermanmillerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hess.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innatepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.adicetbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.galectintherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.glucosebiosensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onepeloton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shutterstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aduro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beamtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centogene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.davita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.galeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gbs.inc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.getfluent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hermanmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.innate-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.midlandsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phathompharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skyworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tileshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vincerapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vincerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vir.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aprea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.artaratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.baldwinriskpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bellushealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hbtfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.livongo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ocugen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.restorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rhythmtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rockwellmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.saratogainvestmentcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.seacormarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livongo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlandsb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocugen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepeloton.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phathompharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorbioinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhythmpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockwellmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogainvestmentcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacormarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tileshop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twir.fosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vincerapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raregenllc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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