leapfrog-ssl-36.gcs-web.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:5b:0b:8a:e2:f8:be:31:12:09:f7:6a:a4:38:90:f5:a1 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-36.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:5b:0b:8a:e2:f8:be:31:12:09:f7:6a:a4:38:90:f5:a1
Serial Number (int): 314882209081705022173384068523637810984353
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:7a:4a:1f:38:fb:ae:b3:d3:cc:1e:44:9c:a4:55:68:f3:66:ff:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:1d:9f:5a:0e:c3:88:a4:97:e6:07:96:c9:67:79:54:60:a1:89:f1
Fingerprint (sha256): 0d:a3:f4:d2:51:9e:de:b1:60:b0:50:dc:4b:fe:23:cd:d5:4f:31:29:72:e2:32:8c:22:b9:73:91:ee:fe:29:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leapfrog-ssl-36.gcs-web.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-36.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligostherapeutics.gcs-web.com
allakos.gcs-web.com
ambarella.gcs-web.com
arcadiabiosciencesinc.gcs-web.com
arraytechnologiesinc.gcs-web.com
axonicsmodulation.gcs-web.com
beigeneltd.gcs-web.com
codiakbio.gcs-web.com
eargo.gcs-web.com
edwardslifesciencescorporation.gcs-web.com
efi.gcs-web.com
endologix.gcs-web.com
fmbank.gcs-web.com
foghorntx.gcs-web.com
fstar.gcs-web.com
genmarkdiagnosticsinc.gcs-web.com
glpropinc.gcs-web.com
henryschein.gcs-web.com
investor.aligos.com
investor.allakos.com
investor.ambarella.com
investor.endologix.com
investor.henryschein.com
investor.lgihomes.com
investor.natera.com
investor.praxismedicines.com
investor.seaspine.com
investor.startek.com
investor.xilinx.com
investors.f-star.com
investors.glpropinc.com
investors.lumiradx.com
investors.praxismedicines.com
investors.pulsebiosciences.com
investors.ravenind.com
investors.sprucebiosciences.com
investors.taylormorrison.com
ir.arcadiabio.com
ir.arraytechinc.com
ir.axonics.com
ir.beigene.com
ir.codiakbio.com
ir.eargo.com
ir.edwards.com
ir.efi.com
ir.fm.bank
ir.foghorntx.com
ir.genmarkdx.com
ir.landec.com
ir.latticesemi.com
ir.medicenna.com
ir.nuvasive.com
ir.praxismedicines.com
ir.shattucklabs.com
ir.travere.com
ir.willdangroup.com
landeccorporation.gcs-web.com
latticesemi.gcs-web.com
leapfrog-ssl-36.gcs-web.com
lgihomes.gcs-web.com
lumiradx.gcs-web.com
medicennatherapeutics.gcs-web.com
natera.gcs-web.com
nuvasiveinc.gcs-web.com
praxismedicines.gcs-web.com
pulsebiosciences.gcs-web.com
ravenindustriesinc.gcs-web.com
rockyniri.gcs-web.com
seaspineholdingscorporation.gcs-web.com
shattucklabs.gcs-web.com
sprucebiosciences.gcs-web.com
startek.gcs-web.com
taylormorrison.gcs-web.com
travere.gcs-web.com
willdangroupinc.gcs-web.com
www.rockyniri.org
xilinx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-36.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxHPNFTKd0ttYeOvb2ES
QuiTwLW4+SI3SzVAJNWc9pwZvyfrfPw8ebDrjcxtkpIjs0vEz0XvHNGkiquq6DKe
NyXHne1dVai3e1/6BHj3l9aSE36CzlVQNrasrcT0w2KEC7vz3YKX6DlS+TG82RFb
N6KsfSn9+Tt13yUPN7L7Mx/pRMZeJBMHmDD6A7mR4JPCYI9UYH8UI35Rv81PMeTJ
KEeM7I2chnB3BDl3D4xBzywzsj/xd+fXekvO6wcbFSAUboyWDKGGsc3rM20n++9W
p7GU6/u5aaWDhoZw9WHc2iZnTHbC01WcuBdRlBwrwzceAWV4NBg3/DSyqZhqfg56
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314882209081705022173384068523637810984353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 13:05:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-13 13:05:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21090579067970459634609941147505538572571873816452638030533916856234002948917515215036155698096746739107113736828980818192698344105548062477976825842540952444433064280635649120072520482693458234314330626284458792659857807895822604154238392675438191371112306044328467517625755044239572902376619147970780448889709960822788663100574033066114646250442113527090735833946472496816641511530544103905263765330908666643626644116078965422226852805815766811854082416953497559810684613364626419295619891977320579376611024059535870927667375646439044079160463074183029990741642097230598530829068025335428796805247513387159117527757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d47a4a1f38fbaeb3d3cc1e449ca45568f366ff55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligostherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allakos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambarella.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadiabiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arraytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axonicsmodulation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beigeneltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codiakbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eargo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwardslifesciencescorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foghorntx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmarkdiagnosticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glpropinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryschein.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aligos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allakos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ambarella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.henryschein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lgihomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.natera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seaspine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.startek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xilinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.f-star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.glpropinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lumiradx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulsebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ravenind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.taylormorrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcadiabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arraytechinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.beigene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codiakbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.edwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.efi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fm.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.foghorntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genmarkdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.landec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.medicenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nuvasive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.shattucklabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.travere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.willdangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landeccorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgihomes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiradx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicennatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvasiveinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravenindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockyniri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaspineholdingscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattucklabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylormorrison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travere.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willdangroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockyniri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilinx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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