leapfrog-ssl-22.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:08:61:79:9b:95:a6:43:24:30:c5:d1:92:11:01:b7:95 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-22.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:08:61:79:9b:95:a6:43:24:30:c5:d1:92:11:01:b7:95
Serial Number (int): 332467012425016677505758871028192717682581
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:1a:e0:02:53:73:52:ca:c7:5b:34:db:61:7a:33:8d:d9:d8:44:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:2d:d4:5e:90:73:39:8e:f1:7d:70:d3:a3:26:bc:af:a5:28:04:71
Fingerprint (sha256): 09:ff:3a:aa:17:4d:46:db:d7:78:17:fc:a0:3b:75:50:c2:9e:be:73:a7:61:cb:7d:ec:21:50:b8:2b:c6:ff:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-22.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-22.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aprea.gcs-web.com
artaratx.gcs-web.com
awholdings.gcs-web.com
bakerhughes.gcs-web.com
baldwinriskpartners.gcs-web.com
beamtherapeutics.gcs-web.com
bellushealth.gcs-web.com
callawaygolf.gcs-web.com
cansortium.gcs-web.com
carnivalcorporationplc.gcs-web.com
centogene.gcs-web.com
deleklogistics.gcs-web.com
deleklogisticspartnerslp.gcs-web.com
delekus.gcs-web.com
exagen.gcs-web.com
galectintherapeuticsinc.gcs-web.com
galeratherapeutics.gcs-web.com
gbsinc.gcs-web.com
hbtbank.gcs-web.com
hermanmillerinc.gcs-web.com
hess.gcs-web.com
investor.adicetbio.com
investor.galectintherapeutics.com
investor.glucosebiosensor.com
investor.onepeloton.com
investor.shutterstock.com
investors.awholdings.com
investors.bakerhughes.com
investors.beamtx.com
investors.centogene.com
investors.exagen.com
investors.galeratx.com
investors.gbs.inc
investors.getfluent.com
investors.hermanmiller.com
investors.liquidia.com
investors.midlandsb.com
investors.otonomy.com
investors.phathompharma.com
investors.quoinpharma.com
investors.skyworksinc.com
investors.tileshop.com
investors.vincerapharma.com
investors.vincerx.com
investors.vir.bio
ir.aprea.com
ir.artaratx.com
ir.baldwinriskpartners.com
ir.bellushealth.com
ir.callawaygolf.com
ir.hbtfinancial.com
ir.livongo.com
ir.ocugen.com
ir.rhythmtx.com
ir.rockwellmed.com
ir.saratogainvestmentcorp.com
ir.seacormarine.com
ir.telabio.com
leapfrog-ssl-22.gcs-web.com
liquidia.com
liquidia.gcs-web.com
livongo.gcs-web.com
midlandsb.gcs-web.com
ocugen.gcs-web.com
onepeloton.gcs-web.com
otonomy.gcs-web.com
phathompharmaceuticals.gcs-web.com
quoinpharma.gcs-web.com
restorbioinc.gcs-web.com
rhythmpharmaceuticals.gcs-web.com
rockwellmedicalinc.gcs-web.com
saratogainvestmentcorp.gcs-web.com
seacormarine.gcs-web.com
shutterstock.gcs-web.com
skyworks.gcs-web.com
telabio.gcs-web.com
tileshop.gcs-web.com
vincerapharma.gcs-web.com
vir.gcs-web.com
www.carnivalcorp.com
www.carnivalcorp.us
www.carnivalcorporation.com
www.carnivalplc.com
www.liquidia.com
www.raregenllc.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-22.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVWczT5Fq9hNyxaLM+33
Z3xx1nKdg5O/apmAc3sVNieqFK1Kf9NC9usbKWxl3CBswUeGI5pimjoi5smHsMSj
BqFIzGBb9E8AivRKbM/ZELgWMiOh1+ZIGxF5puuf9fhvBsztS20hEGHSV2KAxMuQ
jhj6Y7QQTt6vXnQcfuMiSXqujFIHAmyIn3HMPOr7xSMlTcT5+TrzF+pwYsHYohx8
zzuD+uJ9C0+olBoGHmzY/6yW2bIBTQYBrt8f8lUnm7ThSouYXbvoxMu8KIpLyclo
fcvyb4QTaaR5f/QnpM1hjSeDeRDo0CfNvXkZ9ykxmKIdhYZNq2JjJyZe/t3E4og9
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332467012425016677505758871028192717682581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 11:44:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-19 11:44:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21376490639801857762748405397433583877171455081959863366271458836463852896154826381717033377769868659484130956923289185821649003660522284805473849150697484735878471133275870012085367231917924488120031617418802684842270462368538235361925492289430578790586679435452723039538843750338875468147617650375505632479992994575234210407986551878075478662939073548143972253961688283062848141044785177844239654037977643231964789004092427733505991631947774234116083428175626021849237881488642625334010242583475860289984262869055571702340302332764619038785196116990358117519840707706370416138547640878665212806752240216312990154009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							871ae002537352cac75b34db617a338dd9d8448a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artaratx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinriskpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellushealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callawaygolf.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cansortium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnivalcorporationplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centogene.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogistics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleklogisticspartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delekus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exagen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galectintherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbtbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermanmillerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hess.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.adicetbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.galectintherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.glucosebiosensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.onepeloton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.shutterstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.awholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bakerhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beamtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centogene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.exagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.galeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gbs.inc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.getfluent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hermanmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.midlandsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phathompharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.quoinpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skyworksinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tileshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vincerapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vincerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vir.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aprea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.artaratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.baldwinriskpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bellushealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.callawaygolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hbtfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.livongo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ocugen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rhythmtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rockwellmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.saratogainvestmentcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.seacormarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.telabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-22.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livongo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midlandsb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocugen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepeloton.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phathompharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quoinpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorbioinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhythmpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockwellmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogainvestmentcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacormarine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutterstock.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tileshop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vincerapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnivalplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liquidia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raregenllc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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