leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7b:fb:02:a3:66:17:f1:41:90:13:e8:b0:8b:fb:c5:03:c8 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:fb:02:a3:66:17:f1:41:90:13:e8:b0:8b:fb:c5:03:c8
Serial Number (int): 390637524783973596333882034081254082937800
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:13:18:a6:33:81:87:dd:01:e9:73:ae:03:95:7f:59:d0:c1:83:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:ae:21:4b:c5:d9:4a:fa:62:9b:80:e7:95:35:37:48:b4:40:f5:91
Fingerprint (sha256): 0e:32:77:73:32:2c:bc:bf:9a:e5:26:73:80:76:d8:2e:f1:1a:e0:fb:d8:19:5d:65:35:80:e8:68:74:95:d2:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amphastar.gcs-web.com
atour.gcs-web.com
brightspire.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
coupainvestorday.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
healthcareroyalty.gcs-web.com
highpeakenergy.gcs-web.com
intapp.gcs-web.com
integralads.gcs-web.com
intrepidpotashinc.gcs-web.com
investor.toromont.com
investorday.coupa.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.intapp.com
investors.integralads.com
investors.intrepidpotash.com
investors.krispykreme.com
investors.legalzoom.com
investors.originmaterials.com
investors.pwpartners.com
investors.secondsight.com
investors.shelteracq.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.52tt.com
ir.amphastar.com
ir.brightspire.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.highpeakenergy.com
ir.lyell.com
ir.many-core.com
ir.monday.com
ir.monterosatx.com
ir.omegatherapeutics.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
krispykreme.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
mondaycom.gcs-web.com
monterosatx.gcs-web.com
omegatherapeutics.gcs-web.com
originmaterials.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
quwanholdinglimited.gcs-web.com
scholarrockinvestorday.gcs-web.com
secondsight.gcs-web.com
shelteracq.gcs-web.com
theratech.gcs-web.com
toromont.gcs-web.com
uscentury.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjUwxhj63tfh7lwFMvG
7BdUp5J7Q/GNImQSsDFIBzGS1lP3mCULnA/ZAie/grLINR2K9YCsZtte7uy+RdxJ
+5rY+oBE0hvuZXvx4NLzXTGnwm8QuwwCE52LjCssueaU1h9lLNaBzdIgpZaqQF/6
6OswhGky283A3qK0KslfEnGb42Pu+vq9K2I0kbB24hXMP+FHX/U6baOih45YsBjw
bowK2K1iLcJvpsZd5fibeQbD+ulKfNkUY0871S1ZLx7oioc4JgIvaYdCaxB2tmLw
mgvrZehXzF5Ko2mgXPTku+p3GLjrIByyjuZmfPKqO62FPvntVK8CQNWLJxyjxZnQ
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390637524783973596333882034081254082937800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-24 09:37:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 09:37:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26309261575962878580824330404987072590135839517279280498240615512688132367021015682014468070166352980633421292006481084972171228206069666084092274858529195325672879154923356251025233889095353007901678890541651255287217649045346485774485768739083221604984838443560097679905042605701308889802847430694656269547448100141685047386098963118851404679931737518427115327743823181464644687919932028733785026216425420822633631243768197280544011583057559227461574719751742866358155639282263666300915108105255684536801660253834110053216069876204621492469727331497276019920191656052074660095986818493408418479662550748198187159769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a1318a6338187dd01e973ae03957f59d0c183f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amphastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpeakenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.toromont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.coupa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.integralads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intrepidpotash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.krispykreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.originmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.secondsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shelteracq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.52tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amphastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.highpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monterosatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krispykreme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondaycom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterosatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originmaterials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelteracq.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toromont.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a3d9908450000040300463044022016b691830893eec078e57349b6d8440e618fb9a8c47e9c751e27f12493568880022054475a764c940c22e5cd4622b01a4fe441597c444522a2f75394cadfc4062b8f0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a3d99085000000403004830460221009f33dbfe5d142f572b9c3be777b96d036ffcb342796901d7221493dba4173b1f022100b5c2a7da4a2d84f0a5112be89aa60eb79a6567d1c36e0f06e695b77d0d158e36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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