leapfrog-ssl-46.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0d:76:ec:32:40:1c:2f:51:33:6a:d0:13:f2:88:88:dd:ca was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-46.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:76:ec:32:40:1c:2f:51:33:6a:d0:13:f2:88:88:dd:ca
Serial Number (int): 353030889801774226270587574423731313368522
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:17:fc:d2:08:e8:9f:1d:db:23:e1:ed:06:3c:63:4e:e9:40:f9:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:26:67:57:97:bd:2f:9e:da:04:d4:bf:f6:4f:11:bb:11:e0:37:78
Fingerprint (sha256): 08:ca:92:7f:6b:15:46:5a:87:4a:6e:c5:39:49:b2:35:7b:c0:72:da:06:d7:ee:81:77:22:91:aa:d1:0d:37:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-46.gcs-web.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-46.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absci.gcs-web.com
acumenpharm.gcs-web.com
aeye.gcs-web.com
astraspace.gcs-web.com
bbwinc.gcs-web.com
bettertx.gcs-web.com
candeltx.gcs-web.com
cimpressinvestorday.gcs-web.com
cognitiontherapeutics.gcs-web.com
couchbaseinc.gcs-web.com
cvrx.gcs-web.com
digitalbridge.gcs-web.com
elicio.gcs-web.com
epizyme.gcs-web.com
ff.gcs-web.com
finwisebank.gcs-web.com
icosavax.gcs-web.com
imagobio.gcs-web.com
investor.astra.com
investor.renewpower.in
investorday.cimpress.com
investorday2021.oceanfirst.com
investors.absci.com
investors.acumenpharm.com
investors.aeye.ai
investors.bbwinc.com
investors.bettertx.com
investors.couchbase.com
investors.ff.com
investors.finwisebank.com
investors.icosavax.com
investors.matterport.com
investors.orangebanktrust.com
investors.outbrain.com
investors.rapidmicrobio.com
investors.ree.auto
investors.sharecare.com
investors.snapone.com
investors.teads.com
investors.tecnoglass.com
investors.waxcenter.com
ir.candeltx.com
ir.cogrx.com
ir.cvrx.com
ir.digitalbridge.com
ir.elicio.com
ir.epizyme.com
ir.huohua.cn
ir.icosavax.com
ir.imagobio.com
ir.linkdoc.com
ir.lucidmotors.com
ir.ozk.com
ir.perspectum.com
ir.pyrogenesis.com
ir.sema4.com
ir.sophiagenetics.com
ir.tangotx.com
ir.ventyxbio.com
leapfrog-ssl-46.gcs-web.com
linkdoc.gcs-web.com
loganridgefinance.gcs-web.com
lucidmotors.gcs-web.com
matterport.gcs-web.com
oceanfirst.gcs-web.com
orangebanktrust.gcs-web.com
outbrain.gcs-web.com
ozk.gcs-web.com
perspectumdiagnosticsltd.gcs-web.com
pressroom.threevalleycopper.com
pyrogenesis.gcs-web.com
rapidmicrobio.gcs-web.com
reeauto.gcs-web.com
renewpower.gcs-web.com
sema4.gcs-web.com
sharecare.gcs-web.com
snapone.gcs-web.com
sophiagenetics.gcs-web.com
sparkeducation.gcs-web.com
tangotx.gcs-web.com
teads.gcs-web.com
tecnoglass.gcs-web.com
threevalleycopper.gcs-web.com
ventyxbio.gcs-web.com
waxcenter.gcs-web.com
www.bbwinc.com
www.loganridgefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-46.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbJSlB5fdmGyI8KJ9o0P
KlwOwxMzcpt8tpAssWq4M7w/AnA2BY0+3pBiwlAMI0nUBmOJ4PU7D7NgzATDIBHK
X1JZz5fqS/4VvTLcH12MBXKP+8E395DN2bAJ4OXhTX8SB9BReihJ7kH/1cT8Ladl
WOsVm5ARzZa783iwHosSBOAI+aj9IuLbOt0r/cUuKz6NYDSoj+Lm/U3q8vvkH374
YfI8OqEjQ8DwcRYyaC1+0mveQTvDIzP4qfErS1Z50PMU8jkQvrtNknuj2g93jhBR
7NyLSR3+FoqtZnqGAuhy6zTQt4L6gFpXyAw8f6A8wwodpYGbYCrl/JxxVl8NInSX
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353030889801774226270587574423731313368522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-26 17:38:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 17:38:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21422207677168665480890801273428699349861903568323129531554113232414110829006618679080419018722819812587254563411423632978535973480909441957036999452194192535164801211252555155406799743257653326706844390924559746078922540601385177366506235143430760516274874381909150998509387759526161822882518534389619130713665327639373390263332299420932294521395160837062303087935533000873936207230564201933048244808793554377686025493681721831332760375243061600337874698100523967952165438910476346377003214963562385021029614960400201479665390874909724509034732492988830576170519303675928713746163275854828898635195633240051520149393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf17fcd208e89f1ddb23e1ed063c634ee940f9d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1974 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absci.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumenpharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeye.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbwinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettertx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candeltx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimpressinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiontherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchbaseinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elicio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epizyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finwisebank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icosavax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.astra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.renewpower.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.cimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.oceanfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.absci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acumenpharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aeye.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bettertx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.couchbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.finwisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matterport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orangebanktrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ree.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sharecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.snapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.teads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tecnoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waxcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.candeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cogrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cvrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.digitalbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.elicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.epizyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huohua.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.icosavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.imagobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.linkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucidmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ozk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.perspectum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyrogenesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sema4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sophiagenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tangotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ventyxbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdoc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganridgefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matterport.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanfirst.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangebanktrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrain.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectumdiagnosticsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.threevalleycopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyrogenesis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmicrobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reeauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewpower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sema4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharecare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiagenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkeducation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnoglass.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threevalleycopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventyxbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waxcenter.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganridgefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075f3db9b0a2d91f22b1697c643d633c9c7a7e429960af5aec0f64d37ade577b0ce8ef911df55753d07c87e15568a471cf93cefc5d1b78496ed06fd0cbf19736b01e69e50aadcec2876a5ef8d248f4fbe3fcd972d608c4864b0295d73ea4d7b00f7520007e11bda8452e4c0dff3a94e1c1b19f305bd720bc9c681ac46e172b54140f67c6cc84737c9919b9474e76372af3bfbee495fcf019d388425570e25645a5fdc388906f3fb4d97d91accf60faacd60b56088060623ba75f87e1a00c378ca80c3e43ddafa0acbd30e90b66ed5ee85f0ff30475f6a0c85071ef0ec67a5087bbc2e875dec3ddd2d07e448d00bd298b5580ab308fd346bdb3636b786c43d7fd6