leapfrog-ssl-52.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:71:ef:f6:53:a4:d2:fb:98:49:bf:d5:d6:2d:e3:f5:1a:a7 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-52.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:71:ef:f6:53:a4:d2:fb:98:49:bf:d5:d6:2d:e3:f5:1a:a7
Serial Number (int): 300107729749865292539485000729900644375207
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:bf:44:db:8a:b8:24:c0:88:47:3a:0a:b5:85:0f:83:0c:df:e9:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:4b:bc:fd:90:be:e3:75:cf:c6:cb:86:d8:96:8c:f3:ff:ca:10:27
Fingerprint (sha256): 04:bc:32:71:4d:80:06:3e:81:14:8c:09:7e:f3:cc:e9:60:23:66:58:8e:9a:d8:9e:3c:33:6d:e2:42:51:90:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-52.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-52.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2022investorday.challenger.com.au
an2therapeutics.gcs-web.com
belitebio.gcs-web.com
benefitfocusincinvestorday.gcs-web.com
biohavenpharma.gcs-web.com
bioratherapeutics.gcs-web.com
biote.gcs-web.com
calavo.gcs-web.com
callawaygolfinvestorday.gcs-web.com
challengerinvestorday2022.gcs-web.com
clipmoney.gcs-web.com
cmd.pernod-ricard.com
cmd.st.com
columbiacare.gcs-web.com
comeralifesciences.gcs-web.com
dorchestermineralslp.gcs-web.com
eagleus.gcs-web.com
ecarxgroup.gcs-web.com
eledoninvestorday.gcs-web.com
eleisonpharmaceuticals.gcs-web.com
ellingtonfinancial.gcs-web.com
embectacorp.gcs-web.com
enanta.gcs-web.com
ezcorp.gcs-web.com
gogoro.gcs-web.com
investor.an2therapeutics.com
investor.eagleus.com
investor.gogoro.com
investor.onsemi.com
investor.readingrdi.com
investorday.benefitfocus.com
investorday.callawaygolf.com
investorday.lantheus.com
investorday.micron.com
investorday.therealreal.com
investors.belitebio.com
investors.bioratherapeutics.com
investors.cannabist.co
investors.cannabistcompany.com
investors.clipmoney.com
investors.columbia.care
investors.embecta.com
investors.ezcorp.com
investors.jet.ai
investors.ke.com
investors.msprecovery.com
investors.pepgen.com
investors.sentibio.com
investors.swvl.com
investors.telesign.com
ir.biote.com
ir.calavo.com
ir.col-care.com
ir.comeralifesciences.com
ir.ecarxgroup.com
ir.eleison-pharma.com
ir.enanta.com
ir.ke.com
ir.mediacomcable.com
ir.moonlaketx.com
ir.nanobiotix.com
ir.palomarspecialty.com
ir.prenetics.com
ir.rivieraresourcesinc.com
ir.superhiinternational.com
ir.symbotic.com
jetai.gcs-web.com
keholdings.gcs-web.com
lantheusinvestorday.gcs-web.com
leapfrog-ssl-52.gcs-web.com
mediacomcommunicationscorporation.gcs-web.com
micronirday.gcs-web.com
moonlaketx.gcs-web.com
msprecovery.gcs-web.com
nanobiotix.gcs-web.com
onsemi.gcs-web.com
palomarholdingsinc.gcs-web.com
pepgen.gcs-web.com
pernodricard.gcs-web.com
prenetics.gcs-web.com
rdday2022.eledon.com
readingrdi.gcs-web.com
rivieraresources.gcs-web.com
sentibio.gcs-web.com
stmicroelectronicscmd.gcs-web.com
superhiinternational.gcs-web.com
swvl.gcs-web.com
symbotic.gcs-web.com
telesign.gcs-web.com
therealrealinvestorday.gcs-web.com
www.dmlp.net
www.ellingtonfinancial.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-52.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN5TCCDM2gAwIBAgISA3Hv9lOk0vuYSb/V1i3j9RqnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDYyMjQ2NDZaFw0yNDA4MDQyMjQ2NDVaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC01Mi5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2SJQ48rKRkaPARNm5ABMJM/QmB34eG8g+vJJibowo+bpYG
bZMuaXLy9CbgwX31bttO2T/stjFw/fhxjGY3/jH6qDpi/Ii34/EGXSepGgZckgiC
nXZpeKDOOcBnigwUQExLDiey75+fPdIPDBJmWFV/c0zeOZWKtkINyl02BcINMDz5
GtK8sEndc8wxNdNnwzQtZTWAKPAjnbLMKOvmAlxyrP/AMmpMpU4UTH9oXb3QWlVp
DapSl8EY09ShqwFzDNl7gANeymNfzJSfXt1SOLOxwuN9T8B7Yhy4UZ7Qf35PAeYF
6PXp6/bmGLHXz7MY00L7b6W58D4EoTBtsYmigSUCAwEAAaOCCv8wggr7MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUJL9E24q4JMCIRzoKtYUPgwzf6REwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggkFBgNVHREEggj8MIII+IIhMjAyMmludmVzdG9yZGF5
LmNoYWxsZW5nZXIuY29tLmF1ghthbjJ0aGVyYXBldXRpY3MuZ2NzLXdlYi5jb22C
FWJlbGl0ZWJpby5nY3Mtd2ViLmNvbYImYmVuZWZpdGZvY3VzaW5jaW52ZXN0b3Jk
YXkuZ2NzLXdlYi5jb22CGmJpb2hhdmVucGhhcm1hLmdjcy13ZWIuY29tgh1iaW9y
YXRoZXJhcGV1dGljcy5nY3Mtd2ViLmNvbYIRYmlvdGUuZ2NzLXdlYi5jb22CEmNh
bGF2by5nY3Mtd2ViLmNvbYIjY2FsbGF3YXlnb2xmaW52ZXN0b3JkYXkuZ2NzLXdl
Yi5jb22CJWNoYWxsZW5nZXJpbnZlc3RvcmRheTIwMjIuZ2NzLXdlYi5jb22CFWNs
aXBtb25leS5nY3Mtd2ViLmNvbYIVY21kLnBlcm5vZC1yaWNhcmQuY29tggpjbWQu
c3QuY29tghhjb2x1bWJpYWNhcmUuZ2NzLXdlYi5jb22CHmNvbWVyYWxpZmVzY2ll
bmNlcy5nY3Mtd2ViLmNvbYIgZG9yY2hlc3Rlcm1pbmVyYWxzbHAuZ2NzLXdlYi5j
b22CE2VhZ2xldXMuZ2NzLXdlYi5jb22CFmVjYXJ4Z3JvdXAuZ2NzLXdlYi5jb22C
HWVsZWRvbmludmVzdG9yZGF5Lmdjcy13ZWIuY29tgiJlbGVpc29ucGhhcm1hY2V1
dGljYWxzLmdjcy13ZWIuY29tgh5lbGxpbmd0b25maW5hbmNpYWwuZ2NzLXdlYi5j
b22CF2VtYmVjdGFjb3JwLmdjcy13ZWIuY29tghJlbmFudGEuZ2NzLXdlYi5jb22C
EmV6Y29ycC5nY3Mtd2ViLmNvbYISZ29nb3JvLmdjcy13ZWIuY29tghxpbnZlc3Rv
ci5hbjJ0aGVyYXBldXRpY3MuY29tghRpbnZlc3Rvci5lYWdsZXVzLmNvbYITaW52
ZXN0b3IuZ29nb3JvLmNvbYITaW52ZXN0b3Iub25zZW1pLmNvbYIXaW52ZXN0b3Iu
cmVhZGluZ3JkaS5jb22CHGludmVzdG9yZGF5LmJlbmVmaXRmb2N1cy5jb22CHGlu
dmVzdG9yZGF5LmNhbGxhd2F5Z29sZi5jb22CGGludmVzdG9yZGF5LmxhbnRoZXVz
LmNvbYIWaW52ZXN0b3JkYXkubWljcm9uLmNvbYIbaW52ZXN0b3JkYXkudGhlcmVh
bHJlYWwuY29tghdpbnZlc3RvcnMuYmVsaXRlYmlvLmNvbYIfaW52ZXN0b3JzLmJp
b3JhdGhlcmFwZXV0aWNzLmNvbYIWaW52ZXN0b3JzLmNhbm5hYmlzdC5jb4IeaW52
ZXN0b3JzLmNhbm5hYmlzdGNvbXBhbnkuY29tghdpbnZlc3RvcnMuY2xpcG1vbmV5
LmNvbYIXaW52ZXN0b3JzLmNvbHVtYmlhLmNhcmWCFWludmVzdG9ycy5lbWJlY3Rh
LmNvbYIUaW52ZXN0b3JzLmV6Y29ycC5jb22CEGludmVzdG9ycy5qZXQuYWmCEGlu
dmVzdG9ycy5rZS5jb22CGWludmVzdG9ycy5tc3ByZWNvdmVyeS5jb22CFGludmVz
dG9ycy5wZXBnZW4uY29tghZpbnZlc3RvcnMuc2VudGliaW8uY29tghJpbnZlc3Rv
cnMuc3d2bC5jb22CFmludmVzdG9ycy50ZWxlc2lnbi5jb22CDGlyLmJpb3RlLmNv
bYINaXIuY2FsYXZvLmNvbYIPaXIuY29sLWNhcmUuY29tghlpci5jb21lcmFsaWZl
c2NpZW5jZXMuY29tghFpci5lY2FyeGdyb3VwLmNvbYIVaXIuZWxlaXNvbi1waGFy
bWEuY29tgg1pci5lbmFudGEuY29tgglpci5rZS5jb22CFGlyLm1lZGlhY29tY2Fi
bGUuY29tghFpci5tb29ubGFrZXR4LmNvbYIRaXIubmFub2Jpb3RpeC5jb22CF2ly
LnBhbG9tYXJzcGVjaWFsdHkuY29tghBpci5wcmVuZXRpY3MuY29tghppci5yaXZp
ZXJhcmVzb3VyY2VzaW5jLmNvbYIbaXIuc3VwZXJoaWludGVybmF0aW9uYWwuY29t
gg9pci5zeW1ib3RpYy5jb22CEWpldGFpLmdjcy13ZWIuY29tghZrZWhvbGRpbmdz
Lmdjcy13ZWIuY29tgh9sYW50aGV1c2ludmVzdG9yZGF5Lmdjcy13ZWIuY29tghts
ZWFwZnJvZy1zc2wtNTIuZ2NzLXdlYi5jb22CLW1lZGlhY29tY29tbXVuaWNhdGlv
bnNjb3Jwb3JhdGlvbi5nY3Mtd2ViLmNvbYIXbWljcm9uaXJkYXkuZ2NzLXdlYi5j
b22CFm1vb25sYWtldHguZ2NzLXdlYi5jb22CF21zcHJlY292ZXJ5Lmdjcy13ZWIu
Y29tghZuYW5vYmlvdGl4Lmdjcy13ZWIuY29tghJvbnNlbWkuZ2NzLXdlYi5jb22C
HnBhbG9tYXJob2xkaW5nc2luYy5nY3Mtd2ViLmNvbYIScGVwZ2VuLmdjcy13ZWIu
Y29tghhwZXJub2RyaWNhcmQuZ2NzLXdlYi5jb22CFXByZW5ldGljcy5nY3Mtd2Vi
LmNvbYIUcmRkYXkyMDIyLmVsZWRvbi5jb22CFnJlYWRpbmdyZGkuZ2NzLXdlYi5j
b22CHHJpdmllcmFyZXNvdXJjZXMuZ2NzLXdlYi5jb22CFHNlbnRpYmlvLmdjcy13
ZWIuY29tgiFzdG1pY3JvZWxlY3Ryb25pY3NjbWQuZ2NzLXdlYi5jb22CIHN1cGVy
aGlpbnRlcm5hdGlvbmFsLmdjcy13ZWIuY29tghBzd3ZsLmdjcy13ZWIuY29tghRz
eW1ib3RpYy5nY3Mtd2ViLmNvbYIUdGVsZXNpZ24uZ2NzLXdlYi5jb22CInRoZXJl
YWxyZWFsaW52ZXN0b3JkYXkuZ2NzLXdlYi5jb22CDHd3dy5kbWxwLm5ldIIad3d3
LmVsbGluZ3RvbmZpbmFuY2lhbC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvB
vyiF7PhkbgAAAY9QTXu4AAAEAwBIMEYCIQCJPRD0ohoU478T3HG4isC/lKct5wjk
eDmBC7SqpqfRiwIhAPcbkes+U9C0M1um2RlM1jObTmVvV/sAH/HJmAxYvWh/AHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGPUE2DoAAABAMARzBF
AiA1b8fSQ5RrqB5FwhnFBtiAGnxMqUta6cC9lFI0TD4LXAIhAPu3n2HZL5WJpqs6
pouph2RUrYiTBU3ezJ8frKDI2m54MA0GCSqGSIb3DQEBCwUAA4IBAQCtUiPer84C
wqWIrWAl7WIpkWRQ4V8f+Bab21qqwN2dUlCJZeA6oU35VOkmgWvRhuEoQStfi1EO
wGROK6BgC3BJ+5h7S7+kGeSA6uBWHUQSK9DCofdv2xjB6PG/rJLhvdYFhWflKApn
QAiZguX2E9dJAp+4W8DVcfBbcRY7LJW6JYd4wanALRpdpMheTR50XE3xQPnVsYbu
aNLgPvAWXVL2r6DlphSvNAzP1sJKu6JuGvG5QfBvl2haDwobPK2lWboNzJz00vHI
iFdZTiwFMOQ4PmTzukf0LWht2fmWOjfS+aJQ1EQalBSmfArOauJlwouoEtpbbrhY
Cbim9nLPIRfk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZIlDjyspGRo8BE2bkAE
wkz9CYHfh4byD68kmJujCj5ulgZtky5pcvL0JuDBffVu207ZP+y2MXD9+HGMZjf+
MfqoOmL8iLfj8QZdJ6kaBlySCIKddml4oM45wGeKDBRATEsOJ7Lvn5890g8MEmZY
VX9zTN45lYq2Qg3KXTYFwg0wPPka0rywSd1zzDE102fDNC1lNYAo8COdsswo6+YC
XHKs/8AyakylThRMf2hdvdBaVWkNqlKXwRjT1KGrAXMM2XuAA17KY1/MlJ9e3VI4
s7HC431PwHtiHLhRntB/fk8B5gXo9enr9uYYsdfPsxjTQvtvpbnwPgShMG2xiaKB
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300107729749865292539485000729900644375207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 22:46:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 22:46:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-52.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23931106300026517915851284076676943193534477566323927708118093302249377221009783481144126216845766480381422780061841013412166409673037911024782276671929089836312511259655801876852892847316160844187534834743499913971633079900879535344498721881917505496984656359005780021454649448009525380363761680700210780986593842731292307404120830382761130495745324946098803554919280821622379948998682608004776474959451342851517209793747320294037561000982173939343879238808201910944916205216417335963629515480443867824516619269760648349985005873671833596045198457657532175942110741835266846886344043250470886062496746251201844248869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24bf44db8ab824c088473a0ab5850f830cdfe911
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'an2therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belitebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitfocusincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biohavenpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biote.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calavo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolfinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday2022.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipmoney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmd.pernod-ricard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmd.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiacare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeralifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorchestermineralslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecarxgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eledoninvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleisonpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtonfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embectacorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enanta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.an2therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eagleus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gogoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onsemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.readingrdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.benefitfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.lantheus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.micron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.therealreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.belitebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bioratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cannabist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cannabistcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clipmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.columbia.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.embecta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ezcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jet.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.msprecovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pepgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sentibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.swvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.telesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calavo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.col-care.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.comeralifesciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ecarxgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eleison-pharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mediacomcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.moonlaketx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nanobiotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.palomarspecialty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rivieraresourcesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.superhiinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.symbotic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantheusinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-52.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacomcommunicationscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micronirday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonlaketx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msprecovery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanobiotix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palomarholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepgen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pernodricard.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdday2022.eledon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingrdi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivieraresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmicroelectronicscmd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superhiinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swvl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symbotic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telesign.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therealrealinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmlp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellingtonfinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f504d7bb80000040300483046022100893d10f4a21a14e3bf13dc71b88ac0bf94a72de708e47839810bb4aaa6a7d18b022100f71b91eb3e53d0b4335ba6d9194cd6339b4e656f57fb001ff1c9980c58bd687f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f504d83a000000403004730450220356fc7d243946ba81e45c219c506d8801a7c4ca94b5ae9c0bd9452344c3e0b5c022100fbb79f61d92f9589a6ab3aa68ba9876454ad8893054ddecc9f1faca0c8da6e78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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