leapfrog-ssl-40.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:4c:ed:84:fc:11:de:42:f8:31:11:9b:12:48:a3:ee:d1 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-40.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:4c:ed:84:fc:11:de:42:f8:31:11:9b:12:48:a3:ee:d1
Serial Number (int): 342086033354827376719748674058955581026001
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:7a:04:00:3e:ec:79:bf:0c:03:3c:59:65:6c:de:85:1e:2c:ca:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:12:b0:cd:f5:c0:e6:df:b1:66:8e:58:c7:90:96:41:4a:b0:5f:83
Fingerprint (sha256): 04:c7:73:1d:b2:e3:e9:41:76:75:2a:92:9a:c5:c9:8f:7e:48:81:fc:6c:4a:36:1e:3e:b4:25:f1:ba:1c:74:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-40.gcs-web.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-40.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abiomed.gcs-web.com
affirm.gcs-web.com
agcoinvestorday.gcs-web.com
aligntech.gcs-web.com
appharvest.gcs-web.com
apria.gcs-web.com
assetentities.gcs-web.com
bandwidthinvestorday.gcs-web.com
biotelemetry.gcs-web.com
bluebirdbioinc.gcs-web.com
bullpenparlayacquisitioncompany.gcs-web.com
capitalsouthwestcorporation.gcs-web.com
cbbank.gcs-web.com
cinedigm.gcs-web.com
cognyteinvestorday.gcs-web.com
cullinanmanagementinc.gcs-web.com
decipherbio.gcs-web.com
dreamfindershomes.gcs-web.com
drivenbrands.gcs-web.com
gartner.gcs-web.com
gracellbiotechnologies.gcs-web.com
igt.gcs-web.com
interiorlogicgroup.gcs-web.com
investor.aligntech.com
investor.bluebirdbio.com
investor.gartner.com
investorday.agcocorp.com
investorday.bandwidth.com
investorday.cognyte.com
investors.affirm.com
investors.appharvest.com
investors.assetentities.com
investors.cbbank.com
investors.cullinanoncology.com
investors.decipherbio.com
investors.middlesexwater.com
investors.mobixlabs.com
investors.momentus.space
investors.playtika.com
investors.senseibio.com
investors.viantinc.com
ir.apria.com
ir.capitalsouthwest.com
ir.eledon.com
ir.gracellbio.com
ir.interiorlogicgroup.com
ir.kuaishou.com
ir.landosbiopharma.com
ir.markertherapeutics.com
ir.montaukrenewables.com
ir.motorsportgames.com
ir.purposebuiltbrands.com
ir.sana.com
ir.selectabio.com
ir.ternspharma.com
kimballelectronics.gcs-web.com
kuaishou.gcs-web.com
landosbiopharmainc.gcs-web.com
leapfrog-ssl-40.gcs-web.com
markertherapeutics.gcs-web.com
metromile.gcs-web.com
middlesexwatercompany.gcs-web.com
mobixlabs.gcs-web.com
momentus.gcs-web.com
montaukrenewables.gcs-web.com
motorsportgames.gcs-web.com
northatlanticacquisitioncorp.gcs-web.com
novustherapeutics.gcs-web.com
orthoclinicaldiagnostics.gcs-web.com
playtika.gcs-web.com
purposebuiltbrands.gcs-web.com
sana.gcs-web.com
selectabio.gcs-web.com
senseibio.gcs-web.com
sterisplc.gcs-web.com
ternspharma.gcs-web.com
viant.gcs-web.com
www.bullpenparlayacquisitioncorp.com
www.naacq.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-40.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjRo8cgWeY8idc8cBsKk
SFKgDZUtnsbg/RPUpFB8Ad5AVIx6KsyizhPQDoisxwN/jjGr8j5jCeBS5bcdznhU
4sELFRvAjVOlAnFyWmdGifF1AmdilXu4ewTKfIWecNU88i91hJUDPNulU5/TDiwX
EDwMm3YKxhZLrrdiI05531YGMVw8IsCO2ViQKEAw5+SSKpRM0QuLe3g5oqSRpr74
WzcT/vEfUGYwGbmTbqIgRSQvhUaOmXUBUF9dMjpQJf5LQOIqGxpi6lAYJUJxX0kk
T75Pc53QAuFS9WcMPKv7HdMHCzXLAo/EhhtUDv1Q2UgwZ6/OT5EyqH0M/3h0Xfeh
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342086033354827376719748674058955581026001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 22:46:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 22:46:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-40.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22496262588254879005041292096500872697327227639474633174553107350337110407126836497920086507668347946198360647222987604535193846730822867284580416553768713240573888856526893261890336701710356718074861528943398298072480740904641635181891766625072528630766453422740562190950321952959402709698210303144012757501946363115402183726364013724980397904015966084751450743930061613970425772657757063173200176470729687551535620671792544083123190022158027209994653404664418803356793456242088992445808767577354858317786534393569167213968748072294356479970985201852521621681765201774850080767900726946586976868628096272935436132747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e7a04003eec79bf0c033c59656cde851e2cca28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abiomed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcoinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligntech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appharvest.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetentities.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandwidthinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotelemetry.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebirdbioinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullpenparlayacquisitioncompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalsouthwestcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinedigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognyteinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cullinanmanagementinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decipherbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamfindershomes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivenbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gartner.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracellbiotechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interiorlogicgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aligntech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.bluebirdbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.agcocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.bandwidth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.cognyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.affirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.appharvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.assetentities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cbbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cullinanoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.decipherbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.middlesexwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mobixlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.momentus.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.playtika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.senseibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viantinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.apria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.capitalsouthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eledon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gracellbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.interiorlogicgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kuaishou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.landosbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.markertherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.montaukrenewables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.motorsportgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.purposebuiltbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.selectabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ternspharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimballelectronics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuaishou.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landosbiopharmainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-40.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markertherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metromile.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlesexwatercompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobixlabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momentus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montaukrenewables.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorsportgames.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northatlanticacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novustherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthoclinicaldiagnostics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtika.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposebuiltbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senseibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterisplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ternspharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullpenparlayacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naacq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d3391388a0000040300483046022100ea49ca08b7fe00fca53b5f9d07520952095465bedd3ddd2067d40918a0a8539202210081ce46664d46024d6fbc8b37d84d048d20b77b1fae10d334d25dbaf9a8e30219007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d339138530000040300483046022100a26ea04e3a0dafa42fb77b781912c8a2855b019fa48962309162b81a0f186372022100c81b9d129bac7c8cf7f5faff5b4de38367d5a7e7483d225300273acf9fa19a03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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