leapfrog-ssl-43.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:f2:21:de:bf:34:e9:6e:96:06:2a:e9:1d:86:ed:f2:e3 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-43.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:f2:21:de:bf:34:e9:6e:96:06:2a:e9:1d:86:ed:f2:e3
Serial Number (int): 329034615484246723469524105493426557809379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:c6:82:c6:69:e8:4d:09:f0:10:4c:e5:80:b8:c3:27:a6:d8:27:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:ef:55:5b:a9:6b:68:ce:cf:ae:c1:41:4c:17:5c:fa:23:1d:af:cc
Fingerprint (sha256): 0f:73:f5:47:2c:10:70:d9:08:8d:ec:1c:a8:cf:64:f6:51:24:a3:e0:b3:2a:ff:8d:97:ff:39:17:d8:50:33:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-43.gcs-web.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-43.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1stdibs.gcs-web.com
achillestherapeuticsuklimited.gcs-web.com
adusa.gcs-web.com
aterian.gcs-web.com
avantax.gcs-web.com
aveanna.gcs-web.com
avidinvestorday.gcs-web.com
blueprintmedicines.gcs-web.com
calwatergroup.gcs-web.com
caratherapeutics.gcs-web.com
fusionfuel.gcs-web.com
gritstoneoncology.gcs-web.com
hearcom.gcs-web.com
hydrafacial.gcs-web.com
impelneuropharma.gcs-web.com
inmedpharmaceuticalsinc.gcs-web.com
intercure.gcs-web.com
investor.lennox.com
investor.lifestance.com
investor.pdl.com
investorandanalystday.perkinelmer.com
investorday.avid.com
investorday.veritone.com
investorday.whitemountains.com
investors.1stdibs.com
investors.avantax.com
investors.beautyhealth.com
investors.hear.com
investors.honest.com
investors.hydrafacial.com
investors.impelnp.com
investors.latch.com
investors.lee.net
investors.middleby.com
investors.orphazyme.com
investors.paycor.com
investors.thetoppscompany.com
investors.universallogistics.com
investors.vaccitech.co.uk
investors.werewolftx.com
ir.achillestx.com
ir.aterian.io
ir.aveanna.com
ir.blueprintmedicines.com
ir.caratherapeutics.com
ir.fusion-fuel.eu
ir.gritstonebio.com
ir.kiromic.com
ir.priviahealth.com
ir.semlerscientific.com
ir.soulapp.cn
ir.talaristx.com
ir.taskus.com
ir.tscan.com
ir.veratx.com
kiromic.gcs-web.com
latch.gcs-web.com
leapfrog-ssl-43.gcs-web.com
lee.gcs-web.com
lennoxinternational.gcs-web.com
lifestancehealth.gcs-web.com
middlebycorporation.gcs-web.com
orphazyme.gcs-web.com
paycor.gcs-web.com
pdl.gcs-web.com
perkinelmeranalystday.gcs-web.com
priviahealth.gcs-web.com
saniona.gcs-web.com
sanionapr.gcs-web.com
semlerscientific.gcs-web.com
soulapp.gcs-web.com
talaristherapeutics.gcs-web.com
taskus.gcs-web.com
thehonestcompany.gcs-web.com
thetoppscompany.gcs-web.com
tscan.gcs-web.com
universallogisticsholdingsinc.gcs-web.com
vaccitech.gcs-web.com
veratherapeutics.gcs-web.com
veritone.gcs-web.com
voltalia.gcs-web.com
werewolftx.gcs-web.com
whitemountainsinvestorday.gcs-web.com
www.adusasc.com
www.beautyhealth.com
www.intercure.co
www.investor.lennox.com
www.pdl.com
www.voltalia.com
xenex.gcs-web.com
zymergen.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-43.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s1movJ9oZ9nmdAiNvU8
yFUV123GwTZ5bwTxexfFzoaSM+9OuqwFIcC0BuXzXiXMiwrN9aoaOX+/rTsJJp2/
sTQxZxjagKzgGRpZnwoVFDcU+BwZsuZUFCYdwNK0AssvCisZHou+mZgutYfWJycK
MT8CMvnv2RtlfJ3tAHhueNsz5uTRFZ3AeyThYq6BkCLQh2j2eJBZ4Ly7FMi3SER9
v6ARO10Mrm0AJQbiE/xPEkwul/c54Kfrf2xUSAVq/3+V80x67evUYtHEBk/c+cnr
UO1v49SMigjEVafgJWBTwnP1SHrUHnJFp7Xpv0P8bqC9eDuGK0kpHr8S2fTuSrN5
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329034615484246723469524105493426557809379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 08:32:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 08:32:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28631143892910286876487968428475019914831162800423364408557249961897378832657639459508621073872706994057348300546881774058209386184004763887710625416460469424345582511337345361104282251603562879799365977483311751759163608094888570537854191365961119189119725144091990239597805982096366968010560514443490612097201124550627112516381030722992367666554327914392773890534965789673391850379378153194654571255301023500621293449043166176712497395300377692822793681260492128468396259847072008480811752751381937378831760966683647113742972369107179069537901667287956802305837703614404567458388829439643915822336392239927723784513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01c682c669e84d09f0104ce580b8c327a6d8277f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achillestherapeuticsuklimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adusa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aterian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveanna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintmedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwatergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionfuel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gritstoneoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrafacial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelneuropharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmedpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lennox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lifestance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorandanalystday.perkinelmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.avid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.veritone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.whitemountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avantax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.honest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrafacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.latch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.middleby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orphazyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thetoppscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.universallogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaccitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.werewolftx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.achillestx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aterian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aveanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.blueprintmedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fusion-fuel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gritstonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiromic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.semlerscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.soulapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.talaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.taskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiromic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennoxinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestancehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlebycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orphazyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkinelmeranalystday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priviahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saniona.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanionapr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semlerscientific.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talaristherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehonestcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetoppscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universallogisticsholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccitech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voltalia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werewolftx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemountainsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adusasc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.lennox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymergen.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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