leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:70:35:f2:0a:ce:af:b1:2d:a2:a1:9c:18:20:86:73:cd:f1 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:35:f2:0a:ce:af:b1:2d:a2:a1:9c:18:20:86:73:cd:f1
Serial Number (int): 299520188729241685403870135132735310908913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:d4:6e:31:ed:5c:54:e5:1c:85:d3:09:30:f8:42:1e:10:3d:d4:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:ee:e7:9d:a3:4c:a9:43:2d:11:f8:7d:4c:d2:7c:4f:df:09:40:39
Fingerprint (sha256): 08:b0:95:a1:36:50:51:9c:22:f6:8d:af:2a:01:56:0a:c3:8a:c7:24:97:e7:35:05:b0:c4:43:0c:17:e4:da:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adagiotx.gcs-web.com
aerofarms.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
clarus.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
garrettmotion.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.securitynational.com
investors.adagiotx.com
investors.aerofarms.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.oceanbiomedical.com
investors.rallybio.com
investors.tenayatherapeutics.com
investors.wcgclinical.com
ir.immuneering.com
ir.nalumed.com
ir.portagebiotech.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
oceanbiomedical.gcs-web.com
portagebiotech.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
tenayatherapeutics.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.victoriassecretandco.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJOEfyfr+UJ+/VgFp3ZM
CEuo70ebaYQ/xAb/tfQzngvpcWf8DnDJSd6v4I76K0Ux1O1XdMHYHYBDE/O7+uz1
GBzwRtNhJ7ZJg/xe/p+665xcpnf4MmPx2w6DRZaEkZlL2QGB5XlKGjqJMy+CL1T6
n9cM3Fm82z23ybiIEjLmYpwpdNF5lIBWsf7ujHcBhkCeaha7lNQgpLj3Giovs1t8
SDhetoxdvEEf2q3O3kSkYk84IYU8pbYaQRAC5Mf6AI3pYQkW9bxs4jzWs77Z9O1c
vvPvCN21MHYaKtH7wpIFpHffmQ8VVBn57Ww6NVyTXYDnRlP2JWKiQeBK/gtRBYab
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299520188729241685403870135132735310908913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 20:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-28 20:15:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23805544956233635898167183459849123045392168002440255429212137910184667879583687358228258347049204014604764590930652970962663778942698504631877439940491723592060046109802417938367394651814453636732120335617645890382143819227022552875351817035002755434296311383810948398656673498338694598843918818706254290147937018858291863669610510114329858715633096857687377477780773416869762162049484231758740451458850809153749407358407540513405935312204612831789373017216738502577221227723401869278169364668016828081604188906407122084081352651628244998650422359718850507454578762053028288762773238575979167848889685414994287958859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0d46e31ed5c54e51c85d30930f8421e103dd45b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017af94622a50000040300483046022100a1dd826b2eb25249deecc9d2af5fe1b2539fd6e97a042cd945a3084f7afb390d02210084be1619e96ca3bce87d28511638adc203062b30bdf140df3ac60dc42bedf2c2007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017af946229a00000403004630440220335ac9ff86e5d9ce87384dde98cef7f7fb05257c60c2e8dac6631c56509a12d802204c0225f71d0d0ca4528da6da80a90cc01222ab19665195a5ea53c53d03335c28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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