leapfrog-ssl-44.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ad:36:ef:a4:e9:a1:37:47:6c:d5:7b:87:7f:52:f5:4b:f7 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-44.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ad:36:ef:a4:e9:a1:37:47:6c:d5:7b:87:7f:52:f5:4b:f7
Serial Number (int): 407391015819910146826093936694657199459319
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:61:0a:cf:7e:89:80:02:50:f7:e4:3a:09:9b:c8:fb:dc:1a:67:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:a9:25:48:7f:f3:71:37:5b:f1:2e:f8:2b:aa:3f:ce:ac:05:29:26
Fingerprint (sha256): 06:75:ab:1d:cb:85:73:46:69:e3:aa:1e:40:9b:4f:5d:17:9d:45:37:63:e6:b2:7c:c5:b4:1d:4d:cd:5b:c6:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-44.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-44.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.challenger.com.au
2023investorday.challenger.com.au
amunix.gcs-web.com
caladrius.gcs-web.com
castlecreekbiosciences.gcs-web.com
centessapharmaceuticals.gcs-web.com
challengerinvestorday.gcs-web.com
challengerinvestorday2023.gcs-web.com
ciphermining.gcs-web.com
codexdna.gcs-web.com
contexttherapeutics.gcs-web.com
dayone.gcs-web.com
duolingo.gcs-web.com
enact.gcs-web.com
evercommerce.gcs-web.com
firstadvantagecorp.gcs-web.com
flywire.gcs-web.com
genenta.gcs-web.com
globaleonlineltd.gcs-web.com
harrowinc.gcs-web.com
heidrick.gcs-web.com
huvepharmaeood.gcs-web.com
investor.roivant.com
investor.singulargenomics.com
investorday2021.suncor.com
investors.centessa.com
investors.ciphermining.com
investors.duolingo.com
investors.evercommerce.com
investors.fadv.com
investors.global-e.com
investors.harrowinc.com
investors.heidrick.com
investors.marketwise.com
investors.marqeta.com
investors.monsterbevcorp.com
investors.nautilus.bio
investors.oatly.com
investors.renovorx.com
investors.reservoir-media.com
investors.rxsight.com
investors.sightsciences.com
investors.somalogic.com
investors.tegna.com
investors.vailresorts.com
investors.vimeo.com
ir.amunix.com
ir.caladrius.com
ir.castlecreekbio.com
ir.codexdna.com
ir.contexttherapeutics.com
ir.dayonebio.com
ir.enactmi.com
ir.flywire.com
ir.genenta.com
ir.huvepharma.com
ir.katapultholdings.com
ir.lottery.com
ir.missfresh.cn
ir.qiniu.com
ir.sagimet.com
ir.teknova.com
ir.vervetx.com
ir.vivaaerobus.com
ir.walkme.com
ir.xyre.com
katapultholdings.gcs-web.com
leapfrog-ssl-44.gcs-web.com
lottery.gcs-web.com
marketwise.gcs-web.com
marqeta.gcs-web.com
missfresh.gcs-web.com
monsterenergycompany.gcs-web.com
nautilusbio.gcs-web.com
oatlygroup.gcs-web.com
qiniulimited.gcs-web.com
renovorx.gcs-web.com
reservoirmedia.gcs-web.com
roivant.gcs-web.com
rxsight.gcs-web.com
sagimetbiosciences.gcs-web.com
sightsciences.gcs-web.com
singulargenomics.gcs-web.com
somalogic.gcs-web.com
suncor.gcs-web.com
tegna.gcs-web.com
teknova.gcs-web.com
vailresortsinc.gcs-web.com
vervetx.gcs-web.com
vimeo.gcs-web.com
vivaaerobus.gcs-web.com
walkme.gcs-web.com
xinyuanrealestate.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-44.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp96sf6iApHuCOWhvZVS
YOkZ5t0uk1j4mKVd8cRRq1TXeaUAEY8mLyU/yDLXxIBBKIrJNiCfvRwD3ARDt9Zg
hWzJamVcj8XYtO9w8NkgfSJ7qRDJ5I7YaIWhouMLmJEa8g9H7oD8y85aDNuJpdlx
3aXuY3heb6R4kX5A2KhsBi0vDXD7accisNf1P5WH5eh2upM0WPy86w+fF8p/G8tb
JksXidvKQbzSVFcnDHYO0TYvOsSxT1XFcM0JzJ0c8bSSMtUxCnDoQLUWVkkxO3Nq
ofwviz/ZmAsRDP8yf2YR0sz2aoaFGdnddZU3fA3GuY1HAJN4C6oe0pfZqJUO+8yR
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407391015819910146826093936694657199459319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 01:40:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 01:40:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22549060447211948409724303849034235407841432537188873386219139982849162627250696722624054032051773226343957570771896385737228359606474021882465447736537496030390968240354785779726218189862649400378099355065858867115812826373362906421667367729457838627955721809342805075063200409142357737373181845731290633375138748114167230443591344159716977481248757234213558046595889526014824076724508733323108032541245172392843100118668783087549168910454038362903047927849500145437435103733877096329876321727605283568470974348740522544730425567384966055227061122459821408605236324628214278689758235018122860403333344357192869646723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53610acf7e89800250f7e43a099bc8fbdc1a6734
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amunix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caladrius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlecreekbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centessapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday2023.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciphermining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexdna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duolingo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enact.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evercommerce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstadvantagecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flywire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genenta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaleonlineltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrowinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidrick.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huvepharmaeood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.roivant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.singulargenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.suncor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ciphermining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.duolingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.evercommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.global-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harrowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heidrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marketwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marqeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.monsterbevcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nautilus.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oatly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renovorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.reservoir-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rxsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sightsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.somalogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tegna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vailresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amunix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caladrius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlecreekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexdna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.contexttherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dayonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enactmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huvepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.katapultholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.missfresh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qiniu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sagimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.teknova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vervetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.walkme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xyre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katapultholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketwise.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marqeta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missfresh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterenergycompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oatlygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiniulimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovorx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservoirmedia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roivant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagimetbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singulargenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somalogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tegna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vailresortsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vervetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivaaerobus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xinyuanrealestate.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e737b17bc0000040300483046022100d9ee1fda8ef9976d303008ae3b39325655b8890961f5db034e0070d8e7fcd567022100de3faee872d9998feb6516d0bd7c5da55b7983360e1638235b14dc0589586efa007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e737b1fab0000040300463044022059bfb2e64b42d05f16380ffc7838970a018a446819a4ff7eca9b36c5e6659097022001e978ae0c3cc8485f6a69dbb420c146205c4392d5fbafbb84cf571f1e31518a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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