leapfrog-ssl-35.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:73:4f:e6:1e:09:7c:72:c2:28:80:82:f2:73:0e:e3:5c:b3 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-35.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:4f:e6:1e:09:7c:72:c2:28:80:82:f2:73:0e:e3:5c:b3
Serial Number (int): 300575533840356991050299743417195787672755
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:50:4d:d2:a3:48:c8:5b:8d:01:5f:0a:29:7b:80:a4:49:65:50:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:81:92:95:cd:15:5b:f2:90:eb:65:33:ff:24:77:4a:1c:3f:37:0f
Fingerprint (sha256): 0b:c3:76:73:37:94:be:33:3c:e9:3c:f9:b0:da:ef:d3:12:43:98:79:78:b5:3a:00:fe:d0:d5:9f:12:e6:04:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-35.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-35.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.gcs-web.com
airproducts.gcs-web.com
amylyx.gcs-web.com
angihomeservices.gcs-web.com
athira.gcs-web.com
aziyobiologics.gcs-web.com
bioaiacceleration.gcs-web.com
chindatagroup.gcs-web.com
chinooktx.gcs-web.com
cleanenergyfuels.gcs-web.com
cytokineticsinc.gcs-web.com
ducommun.gcs-web.com
eidostx.gcs-web.com
ensigngroup.gcs-web.com
freeholdprop.gcs-web.com
gettyimages.gcs-web.com
goodrx.gcs-web.com
graybug.gcs-web.com
highcape.gcs-web.com
inseegocorp.gcs-web.com
investor.chindatagroup.com
investor.ensigngroup.net
investor.inseego.com
investor.ncm.com
investor.radiusglobal.com
investor.tandemdiabetes.com
investor.xilinx.com
investorrelations.us-concrete.com
investors.academy.com
investors.airproducts.com
investors.amylyx.com
investors.athira.com
investors.aziyo.com
investors.chinooktx.com
investors.cleanenergyfuels.com
investors.ducommun.com
investors.gettyimages.com
investors.goodrx.com
investors.graybug.vision
investors.koppers.com
investors.lumiradx.com
investors.missionproduce.com
investors.nblmidstream.com
investors.oncorus.com
investors.paya.com
investors.preludetx.com
investors.sohu.com
investors.spinalelements.com
investors.sprucebiosciences.com
investors.vitru.com.br
ir.angi.com
ir.angihomeservices.com
ir.cytokinetics.com
ir.eidostx.com
ir.freeholdprop.com
ir.motorsportnetwork.com
ir.restorationhardware.com
ir.rh.com
ir.shattucklabs.com
ir.skysolarholdings.com
ir.spac.highcape.com
ir.tarsusrx.com
ir.tayshagtx.com
ir.traconpharma.com
ir.urovant.com
ir.zumiez.com
koppersholdingsinc.gcs-web.com
leapfrog-ssl-35.gcs-web.com
lumiradx.gcs-web.com
media.urovant.com
missionproduce.gcs-web.com
motorsportnetwork.gcs-web.com
nationalcinemedia.gcs-web.com
noblemidstreampartnerslp.gcs-web.com
oncorus.gcs-web.com
payainc.gcs-web.com
preludetx.gcs-web.com
radiusdigital.gcs-web.com
restorationhardware.gcs-web.com
rh.gcs-web.com
shattucklabs.gcs-web.com
skysolarholdingsltd.gcs-web.com
sohucominc.gcs-web.com
spinalelements.gcs-web.com
sprucebiosciences.gcs-web.com
tandemdiabetes.gcs-web.com
tarsusrx.gcs-web.com
tayshagtx.gcs-web.com
traconpharma.gcs-web.com
urovantsciences.gcs-web.com
usconcreteinc.gcs-web.com
vitrulimited.gcs-web.com
www.radiusglobal.com
xilinx.gcs-web.com
zumiez.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-35.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufQfH1n97AcGkqkVysPE
BetyvBCPDIgXvm3QIx0VHa9XOojd4A3qZzIOj/M3W7QWt1Gff9+/Ntrdl9RRwJrj
gtcvovydkvJ2ZMcLzcBkElpg72qyQHIMfDmvqnjmkUwW4zUarOqo/5rt2C0qJOHn
mCTJGXMnzyfbEsTsGmBQ7aFOCaC+tZ5vgRlMMmnAKQr6lfV4AD/H8dgR0JGq4Set
IT7pF/QSX0Igu+R3BA3QIOeiMCBSMj7uhy9y9haHzC1i8ynMLLleNH+H/eaAtkL1
YtMKV5+vLLGbf66fdIzAPvobRDmDicQU9EewSJRkQ5eNHxa4LcOf3rCOwYLLVvYs
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300575533840356991050299743417195787672755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-05 20:38:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-03 20:38:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-35.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23474467252596422967023834263602310828191710714195693049714406317046026671949164946982652738487643382881777423150855190794759380433433466520903845997873212851191016570435293235117925938418176235191830029568355418575490546261321209219525295483804858846577648625092592244116567289991418111178641858775952756040852118121991935198993610955508410997627332874009640706529154331580861016697180954380030452911077676497741145404233814448752727422608643731266444508552827630466655483963145871595603938081682972894084966050885519871780324864703467214683883893556734543867271644272954689766358547983215447245021078942065125370971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17504dd2a348c85b8d015f0a297b80a449655029
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airproducts.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amylyx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angihomeservices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athira.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aziyobiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioaiacceleration.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chindatagroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinooktx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanenergyfuels.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytokineticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducommun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eidostx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensigngroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeholdprop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gettyimages.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graybug.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highcape.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inseegocorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.chindatagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ensigngroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inseego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ncm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.radiusglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tandemdiabetes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xilinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.us-concrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.airproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amylyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.athira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aziyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chinooktx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cleanenergyfuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ducommun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.graybug.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.koppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumiradx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.missionproduce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nblmidstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oncorus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.preludetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sohu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.spinalelements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vitru.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.angi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.angihomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cytokinetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eidostx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.freeholdprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.motorsportnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.restorationhardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.shattucklabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.skysolarholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.spac.highcape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tarsusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tayshagtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.traconpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.urovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zumiez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koppersholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-35.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiradx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.urovant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionproduce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorsportnetwork.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalcinemedia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noblemidstreampartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncorus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preludetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiusdigital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorationhardware.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattucklabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skysolarholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sohucominc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinalelements.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandemdiabetes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarsusrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tayshagtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traconpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urovantsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usconcreteinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitrulimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiusglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilinx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zumiez.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180962925500000040300473045022100b1bcb749c5a943f758c70488103eaadc8845960380ba1f465883c951b098d7c402201868d6a76e75ebda06995b1a0ad8ae73754983462d5a2612ca2131ea4200a5a8007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180962926570000040300473045022100e6a0666615c7071a67c76521c1a940e404f018f251f4166dcf130d1f5a84290f022002387368984feabef12b0938fed5a783e728dee6e6dbf1b1c1edb2e6f037b496
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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