leapfrog-ssl-44.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1c:4b:48:8e:cc:05:c0:fe:01:83:9e:99:cd:20:0d:74:bf was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-44.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:4b:48:8e:cc:05:c0:fe:01:83:9e:99:cd:20:0d:74:bf
Serial Number (int): 358077118842151436371289742127149871887551
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:29:42:cf:59:dd:c6:05:67:a8:22:9c:40:56:c2:e6:7c:16:82:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:43:f1:49:ae:63:39:94:ac:7d:8e:a1:22:07:36:70:10:a8:38:86
Fingerprint (sha256): 0f:f8:15:ca:be:9c:7f:5e:36:4e:8c:77:05:a9:19:6b:e4:b4:ac:dd:19:b7:ff:78:d8:3c:c2:b5:93:83:76:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-44.gcs-web.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-44.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.challenger.com.au
amunix.gcs-web.com
anikatherapeuticsincinvestorday.gcs-web.com
caladrius.gcs-web.com
castlecreekbiosciences.gcs-web.com
centessapharmaceuticals.gcs-web.com
challengerinvestorday.gcs-web.com
ciphermining.gcs-web.com
codexdna.gcs-web.com
contexttherapeutics.gcs-web.com
dayone.gcs-web.com
duolingo.gcs-web.com
enact.gcs-web.com
evercommerce.gcs-web.com
firstadvantagecorp.gcs-web.com
flywire.gcs-web.com
foruworldwideinc.gcs-web.com
genenta.gcs-web.com
globaleonlineltd.gcs-web.com
harrowinc.gcs-web.com
heidrick.gcs-web.com
huvepharmaeood.gcs-web.com
investor.roivant.com
investor.sagimet.com
investor.singulargenomics.com
investorday2021.suncor.com
investors.centessa.com
investors.ciphermining.com
investors.duolingo.com
investors.evercommerce.com
investors.fadv.com
investors.global-e.com
investors.harrowinc.com
investors.heidrick.com
investors.marketwise.com
investors.marqeta.com
investors.monsterbevcorp.com
investors.nautilus.bio
investors.oatly.com
investors.renovorx.com
investors.reservoir-media.com
investors.rxsight.com
investors.sightsciences.com
investors.somalogic.com
investors.tegna.com
investors.vailresorts.com
investors.vimeo.com
ir.amunix.com
ir.caladrius.com
ir.castlecreekbio.com
ir.codexdna.com
ir.contexttherapeutics.com
ir.dayonebio.com
ir.enactmi.com
ir.flywire.com
ir.for-u.com
ir.genenta.com
ir.huvepharma.com
ir.katapultholdings.com
ir.lottery.com
ir.missfresh.cn
ir.qiniu.com
ir.rotech.com
ir.teknova.com
ir.vervetx.com
ir.vivaaerobus.com
ir.walkme.com
ir.xyre.com
katapultholdings.gcs-web.com
leapfrog-ssl-44.gcs-web.com
lottery.gcs-web.com
marketwise.gcs-web.com
marqeta.gcs-web.com
missfresh.gcs-web.com
monsterenergycompany.gcs-web.com
nautilusbio.gcs-web.com
oatlygroup.gcs-web.com
qiniulimited.gcs-web.com
renovorx.gcs-web.com
reservoirmedia.gcs-web.com
roivant.gcs-web.com
rotech.gcs-web.com
rxsight.gcs-web.com
sagimetbiosciences.gcs-web.com
sightsciences.gcs-web.com
singulargenomics.gcs-web.com
somalogic.gcs-web.com
suncor.gcs-web.com
tegna.gcs-web.com
teknova.gcs-web.com
vailresortsinc.gcs-web.com
vervetx.gcs-web.com
vimeo.gcs-web.com
vivaaerobus.gcs-web.com
walkme.gcs-web.com
www.anikainvestorday.com
xinyuanrealestate.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-44.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ThYX4MvYl7p6uo0PgU+
mi/ZZggwGZjGOXjph8400ov0YWko1TCZEa2UKbKaS0fM6Jruhk3SoD/sCNCT4A9d
h69AlKy90bO8UxahHhxRKTzDQPrKxo9Kn2d8YrxEND0e+BFRm61yP7FgNTFEen71
7Gdr3yU/CxS0KEkF7BbYubtgvH1tvT46tA+aeFeDPXRbxY5jhpI8sRa4wWQQhBgM
ZhIsSjzFIw5HkWsiji56CYSq0eExcBuPu7sckLnazhfaCwkcJ6hhl0KYN6Hn5pLq
Q4vG06F5GEoEAC7AkjzXV3kHo7MuL5dmfKMRLUly0K53bb7UOvJ9TKeQh9umghaH
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358077118842151436371289742127149871887551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-21 19:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 19:05:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27421497034961547068011421711970543710263289461131879810760769086397707826321398368154404235034329403538028495729179408106224308220062537771191748414292454403736565959907388169287142534928990866948090750314930988287673999750687146145805308396238179330608203925692331351089756569870601342843287852906441162386186242517721105798088010682073805148342882693368979181859190289295938850963967151616779351503254648863609274734689076470324619981251274817707435890182038196394912081418271505525479958465183780864899771235950663256256759583272173161126142583347918228935935191383349865173998034113533768875853276179099716847593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe2942cf59ddc60567a8229c4056c2e67c16825f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amunix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikatherapeuticsincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caladrius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlecreekbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centessapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciphermining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexdna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duolingo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enact.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evercommerce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstadvantagecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flywire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foruworldwideinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genenta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaleonlineltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrowinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidrick.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huvepharmaeood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.roivant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.singulargenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.suncor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ciphermining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.duolingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.evercommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.global-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harrowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heidrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marketwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marqeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.monsterbevcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nautilus.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oatly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renovorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.reservoir-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rxsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sightsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.somalogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tegna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vailresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amunix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caladrius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlecreekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexdna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.contexttherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dayonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enactmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.for-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huvepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.katapultholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.missfresh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qiniu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.teknova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vervetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivaaerobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.walkme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xyre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katapultholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketwise.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marqeta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missfresh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterenergycompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oatlygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiniulimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovorx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservoirmedia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roivant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagimetbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singulargenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somalogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tegna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vailresortsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vervetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivaaerobus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anikainvestorday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xinyuanrealestate.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017dde99a5900000040300463044022034dc38b36776c13564537c4071388bad04f42c109573ddd58ebdd75ae597dd9702202dea68b3273c91c933e480910ba6874d655c6b3599a4e05b45454e2781c305c000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017dde99a5bb0000040300473045022100ba3db6321924c7629db2fe2d9b0cb9a79408c671e40664b1dbe414f2190406da022051ff210af388e15aec6da2fdaddd416ceb811b212e05523c6f89ea00e41d3b7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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