leapfrog-ssl-42.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:2e:2b:90:20:89:2b:a8:9d:18:01:db:cb:70:ef:05:2c was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-42.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:2e:2b:90:20:89:2b:a8:9d:18:01:db:cb:70:ef:05:2c
Serial Number (int): 303252959606371930426316582559759429731628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:e8:c4:b5:62:72:00:7c:3f:12:4e:5c:b8:9c:d9:a0:c9:c4:d2:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:ce:d8:06:53:cd:49:5a:8f:61:cd:7e:13:9d:e7:d9:ef:2a:9b:b6
Fingerprint (sha256): 05:86:ec:82:ff:65:b2:e2:e7:55:09:6a:58:83:49:15:80:bf:2e:1d:7f:e3:54:dd:61:e6:78:23:de:c5:b4:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-42.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-42.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

23andme.gcs-web.com
acvauto.gcs-web.com
akoyabiosciences.gcs-web.com
alignmenthealthcare.gcs-web.com
alkami.gcs-web.com
amcnetworksinc.gcs-web.com
atai.gcs-web.com
biomeafusion.gcs-web.com
brinks.gcs-web.com
brp.gcs-web.com
catalystpartnersacqcorp.gcs-web.com
connectbiopharma.gcs-web.com
cricut.gcs-web.com
ctoreit.gcs-web.com
enmonster.gcs-web.com
evokepharmainc.gcs-web.com
fivestarbank.gcs-web.com
flyfrontier.gcs-web.com
ftcsolar.gcs-web.com
guidewireinvestorday.gcs-web.com
haemoneticsinvestorday.gcs-web.com
hertznewsroomint.gcs-web.com
hillinternationalinc.gcs-web.com
hywin.gcs-web.com
ikenaoncology.gcs-web.com
intl.newsroom.hertz.com
investor.cricut.com
investor.evokepharma.com
investor.ftcsolar.com
investorday.latticesemi.com
investors.23andme.com
investors.acvauto.com
investors.akoyabio.com
investors.alkami.com
investors.amcnetworks.com
investors.biomeafusion.com
investors.brinks.com
investors.connectbiopharm.com
investors.fivestarbank.com
investors.kaltura.com
investors.maxcyte.com
investors.myyellow.com
investors.neuropace.com
investors.olink.com
investors.rainthera.com
investors.treace.com
investors.uei.com
ipower.gcs-web.com
ir.alignmenthealth.com
ir.atai.life
ir.brp.com
ir.ctlc.com
ir.ctoreit.com
ir.enmonster.com
ir.flyfrontier.com
ir.hillintl.com
ir.hywinwealth.com
ir.ikenaoncology.com
ir.lathampool.com
ir.longboardpharma.com
ir.meetipower.com
ir.syndax.com
ir.thredup.com
ir.transcodetherapeutics.com
ir.vectivbio.com
irday.haemonetics.com
kaltura.gcs-web.com
lathampool.gcs-web.com
latticesemianalystday.gcs-web.com
lazardfintechacquisitioncorp.gcs-web.com
lazardgrowthacquisitioncorp.gcs-web.com
lazardhealthcareacquisitioncorp.gcs-web.com
leapfrog-ssl-42.gcs-web.com
lfta.lazard.com
lgac.lazard.com
lhca.lazard.com
longboardpharma.gcs-web.com
maxcyte.gcs-web.com
neuropace.gcs-web.com
news.brp.com
notified.gcs-web.com
olink.gcs-web.com
rainthera.gcs-web.com
revolutionhealthcare.gcs-web.com
revolutionhealthcareacqcorp.com
syndaxpharmaceuticalsinc.gcs-web.com
thredup.gcs-web.com
transcodetherapeutics.gcs-web.com
treace.gcs-web.com
universalelectronicsinc.gcs-web.com
vectivbio.gcs-web.com
www.catalystpartnersacqcorp.com
www.revolutionhealthcareacqcorp.com
yrcworldwideinc.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-42.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZPktGLzilnFk1nU2Fg7
V4aNefBaViJby1BdIfBLno3aemPbkJJoMPZZDtgc/7xWOGoZ7cuNQuHTlG++8OBH
jaAZW082+U3V42t7t+5zvrkGdHcEVSJKGUhjMYMPiEtRt2+rogj7KKKQAk3zOU6Y
WJkfEnsQ1tmP/34SunOYT6LEX/xCxIjRzUUF5wAbWRs6nGjCIAx+BLznHOSE/6zR
2Q04YZC3WDgU6/CUgFXN5uXdFYDCjJxCdy4VHMxLzWTneYIffG+RR/D5KU9ACVO5
AM2WtY68DKZBrrruFMZCX0aXiM1dvl6ZaDHpcYUQyUeSixj0TGa3Jy7j5hLpzoJ1
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303252959606371930426316582559759429731628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:40:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 23:40:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-42.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19387389602341263810069349659444082919869393367536293301163396896739660763919092824902469740496440712784145856204665918226118889438555201771818306961752425357802225582815735064062231063944284550442316188946693326162571969122308812421640395564853239311198686107076067499926034802823389283861280588644892054194371686300677514584196624177621628567059789496349797772709011354084817239795632259598926424484836551594830859694854900704877526588294675100495092099578073479511658891209182778049997893021406525088752492407735374961569902628519736167306706453410610485722676860050997681842486013414388383015056446555086211151249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88e8c4b56272007c3f124e5cb89cd9a0c9c4d23e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2323 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '23andme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acvauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akoyabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alignmenthealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkami.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcnetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomeafusion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystpartnersacqcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricut.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctoreit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enmonster.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokepharmainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivestarbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyfrontier.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftcsolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidewireinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemoneticsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertznewsroomint.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hywin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikenaoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intl.newsroom.hertz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cricut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.evokepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ftcsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.23andme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acvauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.akoyabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alkami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amcnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biomeafusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.connectbiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fivestarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.maxcyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.myyellow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neuropace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.olink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rainthera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.treace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.alignmenthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atai.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ctlc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ctoreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flyfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hillintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hywinwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ikenaoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lathampool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.longboardpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.meetipower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.syndax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thredup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.transcodetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vectivbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irday.haemonetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaltura.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lathampool.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemianalystday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardfintechacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardgrowthacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardhealthcareacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-42.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfta.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgac.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhca.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longboardpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxcyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuropace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.brp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainthera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolutionhealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolutionhealthcareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndaxpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thredup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcodetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalelectronicsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vectivbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalystpartnersacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolutionhealthcareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yrcworldwideinc.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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