leapfrog-ssl-55.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:77:06:de:e6:73:94:02:91:f3:6f:c3:06:87:6e:51:61 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-55.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:77:06:de:e6:73:94:02:91:f3:6f:c3:06:87:6e:51:61
Serial Number (int): 419386089852828922282958282299849489404257
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d8:3f:e9:ca:74:f1:ae:8d:cd:5e:5f:30:c4:77:d1:92:6c:ab:62:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:04:ee:95:9f:9b:3e:a5:b3:6b:c7:46:9c:cf:56:fb:17:68:76:bc
Fingerprint (sha256): 07:a7:fa:9f:cc:26:43:8f:a5:55:e1:75:67:5f:59:53:6e:96:9f:6b:8f:c7:88:3a:ac:71:1b:cf:f7:4d:54:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-55.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-55.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2023investorday.zailaboratory.com
60degreespharma.gcs-web.com
abacuslife.gcs-web.com
acelyrin.gcs-web.com
acurapharm.gcs-web.com
admabiologics.gcs-web.com
aerwins.gcs-web.com
altamiratherapeutics.gcs-web.com
apogeetherapeutics.gcs-web.com
asiainnovations.gcs-web.com
atossatherapeutics.gcs-web.com
beneficient.gcs-web.com
bionano.gcs-web.com
cmegroupinc.gcs-web.com
cocacolahbc.gcs-web.com
completesolaria.gcs-web.com
denalitherapeutics.gcs-web.com
digitalmediasolutions.gcs-web.com
donegalgroup.gcs-web.com
drillingtools.gcs-web.com
evolutionpetroleum.gcs-web.com
fiverrinternationalltd.gcs-web.com
fortrea.gcs-web.com
genkoreanbbq.gcs-web.com
geogroup.gcs-web.com
hanoverbank.gcs-web.com
investor-day.coca-colahellenic.com
investor.cmegroup.com
investor.genkoreanbbq.com
investor.rgare.com
investorday2023.lunainc.com
investors.60degreespharma.com
investors.acelyrin.com
investors.acurapharm.com
investors.aerwins.us
investors.apogeetherapeutics.com
investors.atossatherapeutics.com
investors.completesolaria.com
investors.denalitherapeutics.com
investors.digitalmediasolutions.com
investors.donegalgroup.com
investors.drillingtools.com
investors.fiverr.com
investors.fortrea.com
investors.geogroup.com
investors.kneat.com
investors.oddity.com
investors.oildri.com
investors.pinelabs.com
investors.rexamerican.com
investors.rfindustries.com
investors.sealsq.com
investors.sprucebio.com
investors.sprucebiosciences.com
investors.tigoenergy.com
investors.unifiedpostgroup.com
investorsday.upbound.com
ir.abacuslife.com
ir.abacuslifesettlements.com
ir.admabiologics.com
ir.altamiratherapeutics.com
ir.asiainnovations.com
ir.bionano.com
ir.evolutionpetroleum.com
ir.fortrea.com
ir.hanoverbank.com
ir.kimbrx.com
ir.moatable.com
ir.opthea.com
ir.suncartech.com
ir.truxtontrust.com
ir.turnstonebio.com
kimbrxtherapeutics.gcs-web.com
kneat.gcs-web.com
leapfrog-ssl-55.gcs-web.com
lunainnovationsincinvestorday.gcs-web.com
moatable.gcs-web.com
oddity.gcs-web.com
oildri.gcs-web.com
opthealimited.gcs-web.com
pinelabs.gcs-web.com
reinsurancegroupofamericainc.gcs-web.com
rexamerican.gcs-web.com
rfindustries.gcs-web.com
sealsemiconductors.gcs-web.com
shareholders.trustben.com
sprucebiosciences.gcs-web.com
suncar.gcs-web.com
tigoenergy.gcs-web.com
truxtontrust.gcs-web.com
turnstonebio.gcs-web.com
unifiedpost.gcs-web.com
upboundinvestorday.gcs-web.com
www.investors.unifiedpostgroup.com
zailabranddday2023.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-55.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOuTCCDaGgAwIBAgISBNB3Bt7mc5QCkfNvwwaHblFhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDUxOTM5NTlaFw0yNDA0MDQxOTM5NThaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC01NS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0pmzeoxah0ztqmgqKIGtlB7LsJ7Yhn4ft4v5VHHa8ml5IO
KTctW5R/T5zuGTsaPNIg5Hck9UqprsmWCZbUhFUg811LQQvZOcqPvwK6IBDCV8Ka
Kpfxnf6qTq+0wlNv8218t7GqUuMjabgcUIiunbKwysI0ABYsJf692oeoYoiswfZd
Bm5aek+/09Vvb7ADn+uuXtNtKRZ3N9zJSA+a+e8KWG4fG7L+zZNqHhJilHsMgfOO
CbAR+4U/Jq4eUHxC8gTchl9NpI8V30ERvkxzK7RW1bEDlupAdvPCiUDWlwAQFsDy
nDrVwaj9WIqu+bCcEf1YDloY8oa+2IxKQj0ab+sCAwEAAaOCC9MwggvPMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQU2D/pynTxro3NXl8wxHfRkmyrYikwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggnYBgNVHREEggnPMIIJy4IhMjAyM2ludmVzdG9yZGF5
LnphaWxhYm9yYXRvcnkuY29tghs2MGRlZ3JlZXNwaGFybWEuZ2NzLXdlYi5jb22C
FmFiYWN1c2xpZmUuZ2NzLXdlYi5jb22CFGFjZWx5cmluLmdjcy13ZWIuY29tghZh
Y3VyYXBoYXJtLmdjcy13ZWIuY29tghlhZG1hYmlvbG9naWNzLmdjcy13ZWIuY29t
ghNhZXJ3aW5zLmdjcy13ZWIuY29tgiBhbHRhbWlyYXRoZXJhcGV1dGljcy5nY3Mt
d2ViLmNvbYIeYXBvZ2VldGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghthc2lhaW5u
b3ZhdGlvbnMuZ2NzLXdlYi5jb22CHmF0b3NzYXRoZXJhcGV1dGljcy5nY3Mtd2Vi
LmNvbYIXYmVuZWZpY2llbnQuZ2NzLXdlYi5jb22CE2Jpb25hbm8uZ2NzLXdlYi5j
b22CF2NtZWdyb3VwaW5jLmdjcy13ZWIuY29tghdjb2NhY29sYWhiYy5nY3Mtd2Vi
LmNvbYIbY29tcGxldGVzb2xhcmlhLmdjcy13ZWIuY29tgh5kZW5hbGl0aGVyYXBl
dXRpY3MuZ2NzLXdlYi5jb22CIWRpZ2l0YWxtZWRpYXNvbHV0aW9ucy5nY3Mtd2Vi
LmNvbYIYZG9uZWdhbGdyb3VwLmdjcy13ZWIuY29tghlkcmlsbGluZ3Rvb2xzLmdj
cy13ZWIuY29tgh5ldm9sdXRpb25wZXRyb2xldW0uZ2NzLXdlYi5jb22CImZpdmVy
cmludGVybmF0aW9uYWxsdGQuZ2NzLXdlYi5jb22CE2ZvcnRyZWEuZ2NzLXdlYi5j
b22CGGdlbmtvcmVhbmJicS5nY3Mtd2ViLmNvbYIUZ2VvZ3JvdXAuZ2NzLXdlYi5j
b22CF2hhbm92ZXJiYW5rLmdjcy13ZWIuY29tgiJpbnZlc3Rvci1kYXkuY29jYS1j
b2xhaGVsbGVuaWMuY29tghVpbnZlc3Rvci5jbWVncm91cC5jb22CGWludmVzdG9y
LmdlbmtvcmVhbmJicS5jb22CEmludmVzdG9yLnJnYXJlLmNvbYIbaW52ZXN0b3Jk
YXkyMDIzLmx1bmFpbmMuY29tgh1pbnZlc3RvcnMuNjBkZWdyZWVzcGhhcm1hLmNv
bYIWaW52ZXN0b3JzLmFjZWx5cmluLmNvbYIYaW52ZXN0b3JzLmFjdXJhcGhhcm0u
Y29tghRpbnZlc3RvcnMuYWVyd2lucy51c4IgaW52ZXN0b3JzLmFwb2dlZXRoZXJh
cGV1dGljcy5jb22CIGludmVzdG9ycy5hdG9zc2F0aGVyYXBldXRpY3MuY29tgh1p
bnZlc3RvcnMuY29tcGxldGVzb2xhcmlhLmNvbYIgaW52ZXN0b3JzLmRlbmFsaXRo
ZXJhcGV1dGljcy5jb22CI2ludmVzdG9ycy5kaWdpdGFsbWVkaWFzb2x1dGlvbnMu
Y29tghppbnZlc3RvcnMuZG9uZWdhbGdyb3VwLmNvbYIbaW52ZXN0b3JzLmRyaWxs
aW5ndG9vbHMuY29tghRpbnZlc3RvcnMuZml2ZXJyLmNvbYIVaW52ZXN0b3JzLmZv
cnRyZWEuY29tghZpbnZlc3RvcnMuZ2VvZ3JvdXAuY29tghNpbnZlc3RvcnMua25l
YXQuY29tghRpbnZlc3RvcnMub2RkaXR5LmNvbYIUaW52ZXN0b3JzLm9pbGRyaS5j
b22CFmludmVzdG9ycy5waW5lbGFicy5jb22CGWludmVzdG9ycy5yZXhhbWVyaWNh
bi5jb22CGmludmVzdG9ycy5yZmluZHVzdHJpZXMuY29tghRpbnZlc3RvcnMuc2Vh
bHNxLmNvbYIXaW52ZXN0b3JzLnNwcnVjZWJpby5jb22CH2ludmVzdG9ycy5zcHJ1
Y2ViaW9zY2llbmNlcy5jb22CGGludmVzdG9ycy50aWdvZW5lcmd5LmNvbYIeaW52
ZXN0b3JzLnVuaWZpZWRwb3N0Z3JvdXAuY29tghhpbnZlc3RvcnNkYXkudXBib3Vu
ZC5jb22CEWlyLmFiYWN1c2xpZmUuY29tghxpci5hYmFjdXNsaWZlc2V0dGxlbWVu
dHMuY29tghRpci5hZG1hYmlvbG9naWNzLmNvbYIbaXIuYWx0YW1pcmF0aGVyYXBl
dXRpY3MuY29tghZpci5hc2lhaW5ub3ZhdGlvbnMuY29tgg5pci5iaW9uYW5vLmNv
bYIZaXIuZXZvbHV0aW9ucGV0cm9sZXVtLmNvbYIOaXIuZm9ydHJlYS5jb22CEmly
Lmhhbm92ZXJiYW5rLmNvbYINaXIua2ltYnJ4LmNvbYIPaXIubW9hdGFibGUuY29t
gg1pci5vcHRoZWEuY29tghFpci5zdW5jYXJ0ZWNoLmNvbYITaXIudHJ1eHRvbnRy
dXN0LmNvbYITaXIudHVybnN0b25lYmlvLmNvbYIea2ltYnJ4dGhlcmFwZXV0aWNz
Lmdjcy13ZWIuY29tghFrbmVhdC5nY3Mtd2ViLmNvbYIbbGVhcGZyb2ctc3NsLTU1
Lmdjcy13ZWIuY29tgilsdW5haW5ub3ZhdGlvbnNpbmNpbnZlc3RvcmRheS5nY3Mt
d2ViLmNvbYIUbW9hdGFibGUuZ2NzLXdlYi5jb22CEm9kZGl0eS5nY3Mtd2ViLmNv
bYISb2lsZHJpLmdjcy13ZWIuY29tghlvcHRoZWFsaW1pdGVkLmdjcy13ZWIuY29t
ghRwaW5lbGFicy5nY3Mtd2ViLmNvbYIocmVpbnN1cmFuY2Vncm91cG9mYW1lcmlj
YWluYy5nY3Mtd2ViLmNvbYIXcmV4YW1lcmljYW4uZ2NzLXdlYi5jb22CGHJmaW5k
dXN0cmllcy5nY3Mtd2ViLmNvbYIec2VhbHNlbWljb25kdWN0b3JzLmdjcy13ZWIu
Y29tghlzaGFyZWhvbGRlcnMudHJ1c3RiZW4uY29tgh1zcHJ1Y2ViaW9zY2llbmNl
cy5nY3Mtd2ViLmNvbYISc3VuY2FyLmdjcy13ZWIuY29tghZ0aWdvZW5lcmd5Lmdj
cy13ZWIuY29tghh0cnV4dG9udHJ1c3QuZ2NzLXdlYi5jb22CGHR1cm5zdG9uZWJp
by5nY3Mtd2ViLmNvbYIXdW5pZmllZHBvc3QuZ2NzLXdlYi5jb22CHnVwYm91bmRp
bnZlc3RvcmRheS5nY3Mtd2ViLmNvbYIid3d3LmludmVzdG9ycy51bmlmaWVkcG9z
dGdyb3VwLmNvbYIeemFpbGFicmFuZGRkYXkyMDIzLmdjcy13ZWIuY29tMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM21qjfwAABAMASDBGAiEAtnYD
m+IvPzilvHINMFA8DN0zC8PKw3q7cebWSYlNnMICIQCXMsbWgjcnP3o237s27i8W
5poR3qOzjM4FKOEfqmCtpAB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx
H7WbAAABjNtapXMAAAQDAEgwRgIhAK4lrqN2tXItoIQ1FrdUgLI1W0CgRb2TEBFj
VbHXiuaxAiEAsyigZDhiT9mNtgcjLAScfhqR6vH3JUub1+t7DYBM3zowDQYJKoZI
hvcNAQELBQADggEBAFrg1zPy+9GbI0iz/fjTjVggk/jNkdBShiL0CgQAB4HdYddi
CVq/uKS3GCKEoSA5pelnpX6pSqVEh6QIGqHOUphX1xC4QSehgqFQePnEwrsenw4W
o1Y8TJ16wfI0n9puKiVYRpOfdRMi6Jslkjd7TPt8MlMX9m89CJQwaYAzbrD4lXWU
d5/hMvJO+tasMik3mK7fYwbc7orsSzk7xu8rR6FdUeuc1kmrlROo9qT1XMvpMybz
BoC9z5kUiX0co+/i+nVJysRbnSCOiwQ9AO86e2cXCIqAMy8mQlqLQtehKsHJ7kEF
pBFRUzqR5jl1333Fo+qR+cyry8Ol3YuThs/yYQc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SmbN6jFqHTO2qaCooga
2UHsuwntiGfh+3i/lUcdryaXkg4pNy1blH9PnO4ZOxo80iDkdyT1SqmuyZYJltSE
VSDzXUtBC9k5yo+/ArogEMJXwpoql/Gd/qpOr7TCU2/zbXy3sapS4yNpuBxQiK6d
srDKwjQAFiwl/r3ah6hiiKzB9l0Gblp6T7/T1W9vsAOf665e020pFnc33MlID5r5
7wpYbh8bsv7Nk2oeEmKUewyB844JsBH7hT8mrh5QfELyBNyGX02kjxXfQRG+THMr
tFbVsQOW6kB288KJQNaXABAWwPKcOtXBqP1Yiq75sJwR/VgOWhjyhr7YjEpCPRpv
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419386089852828922282958282299849489404257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 19:39:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 19:39:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-55.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29938995117055998992082945224180533708575769758390451389144887851965264148506529250123516195864929254908558725696762402765467958388738983041882623236930496033264293596037309098447471443191299681613665619184248065477294336262964110118724260550402928931366142030104776742239761363107243559699543468619955054021317384174952401940763430705926464180428853212435362986529504208467489492370286353242702618004657566449908589370320611670997422414494484189651548972457450356178849027386651958861682484257012488868485247363387656485736619292250630448197632933060349703969142017923224260110142945374247994659410463117293746024427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d83fe9ca74f1ae8dcd5e5f30c477d1926cab6229
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2511 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023investorday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '60degreespharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacuslife.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acelyrin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurapharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admabiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerwins.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altamiratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apogeetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiainnovations.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atossatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficient.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionano.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolahbc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completesolaria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denalitherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmediasolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donegalgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drillingtools.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolutionpetroleum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiverrinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortrea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genkoreanbbq.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geogroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanoverbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-day.coca-colahellenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cmegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.genkoreanbbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rgare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2023.lunainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.60degreespharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acelyrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acurapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerwins.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.apogeetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.atossatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.completesolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.denalitherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.digitalmediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.donegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.drillingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fiverr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fortrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kneat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oildri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pinelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rfindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sealsq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tigoenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unifiedpostgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorsday.upbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.abacuslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.abacuslifesettlements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.admabiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altamiratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.asiainnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evolutionpetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fortrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hanoverbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kimbrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.moatable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.opthea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.suncartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.truxtontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.turnstonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimbrxtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kneat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-55.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunainnovationsincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moatable.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oildri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthealimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinelabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reinsurancegroupofamericainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexamerican.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfindustries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealsemiconductors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.trustben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigoenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truxtontrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnstonebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifiedpost.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upboundinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.unifiedpostgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday2023.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cdb5aa37f0000040300483046022100b676039be22f3f38a5bc720d30503c0cdd330bc3cac37abb71e6d649894d9cc20221009732c6d68237273f7a36dfbb36ee2f16e69a11dea3b38cce0528e11faa60ada4007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cdb5aa5730000040300483046022100ae25aea376b5722da0843516b75480b2355b40a045bd9310116355b1d78ae6b1022100b328a06438624fd98db607232c049c7e1a91eaf1f7254b9bd7eb7b0d804cdf3a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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