leapfrog-ssl-42.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:45:00:82:79:ba:9b:35:c3:41:eb:0e:0e:83:84:84:24:8b was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-42.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:00:82:79:ba:9b:35:c3:41:eb:0e:0e:83:84:84:24:8b
Serial Number (int): 371929304512133385534233631054039185892491
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:6a:3f:22:19:18:3b:ce:f2:af:a6:27:52:18:eb:15:12:b1:4d:7c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:8b:a6:1d:09:fe:40:99:20:34:41:d8:de:7c:dd:f4:d5:f5:fb:42
Fingerprint (sha256): 08:e1:59:b0:4d:d3:b3:38:44:c8:e1:8f:06:44:e1:df:c5:b6:bc:00:f0:4e:7b:3b:6f:27:b8:2d:ab:15:1a:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-42.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-42.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

23andme.gcs-web.com
acvauto.gcs-web.com
akoyabiosciences.gcs-web.com
alignmenthealthcare.gcs-web.com
alkami.gcs-web.com
amcnetworksinc.gcs-web.com
atai.gcs-web.com
biomeafusion.gcs-web.com
brinks.gcs-web.com
brp.gcs-web.com
catalystpartnersacqcorp.gcs-web.com
connectbiopharma.gcs-web.com
cricut.gcs-web.com
enmonster.gcs-web.com
evokepharmainc.gcs-web.com
fivestarbank.gcs-web.com
flyfrontier.gcs-web.com
ftcsolar.gcs-web.com
hillinternationalinc.gcs-web.com
hywin.gcs-web.com
ikenaoncology.gcs-web.com
investor.cricut.com
investor.evokepharma.com
investor.ftcsolar.com
investorday.latticesemi.com
investors.23andme.com
investors.acvauto.com
investors.akoyabio.com
investors.alkami.com
investors.amcnetworks.com
investors.biomeafusion.com
investors.brinks.com
investors.connectbiopharm.com
investors.fivestarbank.com
investors.kaltura.com
investors.maxcyte.com
investors.myyellow.com
investors.neuropace.com
investors.olink.com
investors.rainthera.com
investors.treace.com
investors.uei.com
ipower.gcs-web.com
ir.alignmenthealthcare.com
ir.atai.life
ir.brp.com
ir.enmonster.com
ir.flyfrontier.com
ir.hillintl.com
ir.hywinwealth.com
ir.ikenaoncology.com
ir.lathampool.com
ir.longboardpharma.com
ir.meetipower.com
ir.syndax.com
ir.thredup.com
ir.transcodetherapeutics.com
ir.tusimple.com
ir.vectivbio.com
kaltura.gcs-web.com
lathampool.gcs-web.com
latticesemianalystday.gcs-web.com
lazardfintechacquisitioncorp.gcs-web.com
lazardgrowthacquisitioncorp.gcs-web.com
lazardhealthcareacquisitioncorp.gcs-web.com
leapfrog-ssl-42.gcs-web.com
lfta.lazard.com
lgac.lazard.com
lhca.lazard.com
longboardpharma.gcs-web.com
maxcyte.gcs-web.com
neuropace.gcs-web.com
news.brp.com
notified.gcs-web.com
olink.gcs-web.com
rainthera.gcs-web.com
revolutionhealthcare.gcs-web.com
revolutionhealthcareacqcorp.com
syndaxpharmaceuticalsinc.gcs-web.com
thredup.gcs-web.com
transcodetherapeutics.gcs-web.com
treace.gcs-web.com
tusimple.gcs-web.com
universalelectronicsinc.gcs-web.com
vectivbio.gcs-web.com
www.catalystpartnersacqcorp.com
www.notified.com
www.revolutionhealthcareacqcorp.com
yrcworldwideinc.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-42.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41VPGrww96eGYQ/6NIzR
Beu3HUxeuVZSnov85FhDPhBgHSAQpw7+8Irj0qN+pCv/A07ms+oZFHk+4krmXs3h
4EPEDb83Lf7QSJHyUyxeNPJl1TGWGvfI9HlFaWdp23w/3gq5enUgSvrI3Ufooj8u
SswV418xtd0yQPXaG0b3uq9tkuYp77c270HhCQ7NWk099cpE1JO84SetGYq3nBf6
YoHiylL2cBFVKUcv0T29oHzzgBs/P7J3Ck4uZpb9h5lXgx+WaMbRm9oNupALKMc7
zXVt3BdD0vugavMH3GoQh1Sb+U/gt/5RysnHvhVNAx2tRpToN1f/v0KvTcWOLxQk
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371929304512133385534233631054039185892491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 09:41:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 09:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-42.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28698162663906236538997556877655986596608421978360631791084125308254164652833898406837938146190059534170461044221454521863719173665378379541066096594557290536217342340831791821335659815009726344283296239963903724152568662281072937181466226592334063677775824678202221016393199079246039658545922884035217717307970287253072077469252029324443171646893403215270485926758383749635875587146610259927435597389363634948327311004362331460131617131040207415663569756001459527092779824624916417497707706091295987636686590575912080780008997703167639844396615533806360461612730853868311465179856228079284202319249804793015447069729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f76a3f2219183bcef2afa6275218eb1512b14d7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '23andme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acvauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akoyabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alignmenthealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkami.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amcnetworksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atai.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomeafusion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystpartnersacqcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricut.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enmonster.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evokepharmainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivestarbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyfrontier.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftcsolar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hywin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikenaoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cricut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.evokepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ftcsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.23andme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acvauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.akoyabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.alkami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amcnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biomeafusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.connectbiopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fivestarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.maxcyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.myyellow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.neuropace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.olink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rainthera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.treace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipower.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.alignmenthealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.atai.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enmonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flyfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hillintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hywinwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ikenaoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lathampool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.longboardpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.meetipower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.syndax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thredup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.transcodetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tusimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vectivbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaltura.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lathampool.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemianalystday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardfintechacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardgrowthacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazardhealthcareacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-42.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfta.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgac.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhca.lazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longboardpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxcyte.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuropace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.brp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainthera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolutionhealthcare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revolutionhealthcareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndaxpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thredup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcodetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusimple.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalelectronicsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vectivbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalystpartnersacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revolutionhealthcareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yrcworldwideinc.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017a42c2592d0000040300463044022047beb0e9395ee25a155d7a1c301e9c2a45ddd6c3ab4f97fb103169cb55d3f5c1022031d26b096481689cb9de5d47f23f274c809b70b0e558c1db77094ccaa5c3f180007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a42c2590a00000403004630440220367c5e9eb32619a6af37c5087e4b4b801806a14219c950c5e4f533885c7e42d6022028b8cdc3660ebeb0e7cde72cd3792d7a9f2d7d068193f752a3890c59eed32cdb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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