leapfrog-ssl-46.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1b:da:62:dd:66:12:29:13:29:99:5f:44:11:37:ef:03:32 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-46.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:da:62:dd:66:12:29:13:29:99:5f:44:11:37:ef:03:32
Serial Number (int): 270814766740818741896885284682351017657138
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:33:d0:d1:e8:f3:23:d4:99:d1:a5:ad:9e:ba:a6:0a:6c:29:ac:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:83:7f:0c:b6:28:69:68:aa:42:d0:89:b6:10:b4:2e:e2:f8:ea:a1
Fingerprint (sha256): 03:c9:87:7c:17:c3:35:26:ca:5c:4d:d6:59:24:41:87:b2:ea:42:94:d5:98:0d:ff:6d:6b:73:09:65:d0:de:a3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-46.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-46.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absci.gcs-web.com
ac.hcnetwork.org
acumenpharm.gcs-web.com
aeye.gcs-web.com
alliancechicago.gcs-web.com
astraspace.gcs-web.com
bbwinc.gcs-web.com
bettertx.gcs-web.com
candeltx.gcs-web.com
cimpressinvestorday.gcs-web.com
cognitiontherapeutics.gcs-web.com
couchbaseinc.gcs-web.com
cvrx.gcs-web.com
digitalbridge.gcs-web.com
elicio.gcs-web.com
epizyme.gcs-web.com
ff.gcs-web.com
finwisebank.gcs-web.com
icosavax.gcs-web.com
imagobio.gcs-web.com
investor.astra.com
investor.renewpower.in
investorday.cimpress.com
investorday2021.oceanfirst.com
investors.absci.com
investors.acumenpharm.com
investors.aeye.ai
investors.bbwinc.com
investors.bettertx.com
investors.couchbase.com
investors.ff.com
investors.finwisebank.com
investors.icosavax.com
investors.matterport.com
investors.neurelis.com
investors.orangebanktrust.com
investors.outbrain.com
investors.rapidmicrobio.com
investors.ree.auto
investors.sharecare.com
investors.snapone.com
investors.strongbridgebio.com
investors.teads.com
investors.tecnoglass.com
investors.waxcenter.com
ir.candeltx.com
ir.cogrx.com
ir.cvrx.com
ir.digitalbridge.com
ir.elicio.com
ir.epizyme.com
ir.huohua.cn
ir.icosavax.com
ir.imagobio.com
ir.linkdoc.com
ir.lucidmotors.com
ir.ozk.com
ir.perspectum.com
ir.pyrogenesis.com
ir.sema4.com
ir.sophiagenetics.com
ir.tangotx.com
ir.ventyxbio.com
leapfrog-ssl-46.gcs-web.com
linkdoc.gcs-web.com
loganridgefinance.gcs-web.com
lucidmotors.gcs-web.com
matterport.gcs-web.com
neurelis.gcs-web.com
oceanfirst.gcs-web.com
orangebanktrust.gcs-web.com
outbrain.gcs-web.com
ozk.gcs-web.com
perspectumdiagnosticsltd.gcs-web.com
pressroom.threevalleycopper.com
pyrogenesis.gcs-web.com
rapidmicrobio.gcs-web.com
reeauto.gcs-web.com
renewpower.gcs-web.com
sema4.gcs-web.com
sharecare.gcs-web.com
snapone.gcs-web.com
sophiagenetics.gcs-web.com
sparkeducation.gcs-web.com
strongbridgebiopharmaplc-redesign.gcs-web.com
tangotx.gcs-web.com
teads.gcs-web.com
tecnoglass.gcs-web.com
threevalleycopper.gcs-web.com
ventyxbio.gcs-web.com
waxcenter.gcs-web.com
www.bbwinc.com
www.loganridgefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-46.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FWc2SLFaZAR1W8sRF+6
5Oa0a312nrLDEvI+FK2TVUD7tAks5v7cscydEGFGj/LHDe/0lXgtNNRDOLF5+re+
mmYel0byh+rUpozp4UiAkAFDGtkFcOLOSDKgU4KbfgY9AdW568yIHWpp57RkyJh9
lqVU+rr5jtpcd+mIMISet3cdjVXMIGDdq5+rtpsJ4D3EBvCx+1W5fb9z4ULjCeLf
G1WJ9STumb3sYXKynygwhDtC3MaXZhKi75ZKoAJXRWmpbeag3TGeNA2rAo7d0Xc8
AQ1QJT9FSSL3teXHRM68DKvWJH7Vf5D/i82QKwFLryVdhk14FPgtscgS80rBmLQ1
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270814766740818741896885284682351017657138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 17:55:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-16 17:55:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26299784622962502189543645623359446478376177577434524961877122269163785705222168767441451084555180943392817078090514874954255776722419370486600667347715932446294446708204150076090020790920144658480346084241289248604137830915127371341421604969114148133407389875762327080179516409754782455553184245166266870883718015193898100479411393811477914867853366460917244039750125860967372365745550168832252554729492965345284082876116927187918268400262690584035014679769940306296147682890455094833819781693896275678719795831398676014759861191374756937190814390784178300968934135197477434855139399026450997411807458768667637200349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1233d0d1e8f323d499d1a5ad9ebaa60a6c29aca6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absci.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.hcnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumenpharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeye.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancechicago.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbwinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettertx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candeltx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimpressinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchbaseinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elicio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epizyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finwisebank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icosavax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.astra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.renewpower.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.cimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.oceanfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.absci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acumenpharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aeye.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bettertx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.couchbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.finwisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matterport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neurelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orangebanktrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ree.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sharecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.snapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.strongbridgebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.teads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tecnoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waxcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.candeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cogrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cvrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.digitalbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.elicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.epizyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huohua.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imagobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.linkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucidmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ozk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.perspectum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyrogenesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sema4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sophiagenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tangotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ventyxbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdoc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganridgefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matterport.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurelis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanfirst.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangebanktrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrain.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectumdiagnosticsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.threevalleycopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyrogenesis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmicrobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sema4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharecare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiagenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkeducation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongbridgebiopharmaplc-redesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnoglass.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threevalleycopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventyxbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waxcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganridgefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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