leapfrog-ssl-34.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:44:77:69:8e:88:bb:2b:b4:55:6c:59:e6:bf:43:05:68:4d was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-34.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:77:69:8e:88:bb:2b:b4:55:6c:59:e6:bf:43:05:68:4d
Serial Number (int): 371747070891268473600507352815856133695565
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:3f:ae:e1:88:8c:54:13:78:84:17:a8:ad:72:36:0b:77:1c:ca:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:80:d6:69:a9:44:cf:96:cc:d0:10:fd:fa:27:d7:d1:ae:32:7e:34
Fingerprint (sha256): 10:45:94:7e:0a:39:a5:71:52:f2:de:b6:1f:2c:af:7b:64:fb:c1:ce:a6:98:42:bc:00:eb:2c:43:7e:97:df:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-34.gcs-web.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-34.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.allegro.eu
accolade.gcs-web.com
agenusbio.gcs-web.com
allegro.gcs-web.com
altagasinvestorday.gcs-web.com
apachecorp.gcs-web.com
avidbio.gcs-web.com
bentleysystems.gcs-web.com
boltbiotherapeutics.gcs-web.com
c4therapeutics.gcs-web.com
capps.gcs-web.com
cerevel.gcs-web.com
chobani.gcs-web.com
cogentbiosciences.gcs-web.com
collectors.gcs-web.com
compasspathways.gcs-web.com
concordmedical.gcs-web.com
corsair.gcs-web.com
echostar.gcs-web.com
elpolloloco.gcs-web.com
fluidigm.gcs-web.com
grab.gcs-web.com
greendot.gcs-web.com
harmonicinc.gcs-web.com
harmonybiosciences.gcs-web.com
houwire.gcs-web.com
iderapharmaceuticalsinc.gcs-web.com
immunogen.gcs-web.com
investor.agenusbio.com
investor.apachecorp.com
investor.apacorp.com
investor.elpolloloco.com
investor.harmonicinc.com
investor.immunogen.com
investor.neworiental.org
investor.stevemadden.com
investor.sumologic.com
investor.textainer.com
investorday.altagas.com
investors.aceragen.com
investors.bentley.com
investors.boltbio.com
investors.cerevel.com
investors.chobani.com
investors.cogentbio.com
investors.collectors.com
investors.fluidigm.com
investors.grab.com
investors.magnachip.com
investors.mastercraft.com
investors.outsetmedical.com
investors.pxd.com
investors.shift.com
investors.verdantearth.tech
ir.accolade.com
ir.avidbio.com
ir.c4therapeutics.com
ir.ccm.cn
ir.compasspathways.com
ir.corsair.com
ir.echostar.com
ir.greendot.com
ir.harmonybiosciences.com
ir.houwire.com
ir.iderapharma.com
ir.pmvpharma.com
ir.qudian.com
ir.tattooedchef.com
ir.vivus.com
ir.xin.com
ir.yield10bio.com
ir.zosanopharma.com
jfrog.gcs-web.com
leapfrog-ssl-34.gcs-web.com
magnachipsemiconductorcorp.gcs-web.com
mcbcholdingsinc.gcs-web.com
meritorincinvestorday.gcs-web.com
movementday.praxismedicines.com
neworientaleducationandtechnologygroupinc.gcs-web.com
outsetmedicalinc.gcs-web.com
pioneernaturalresourcescompany.gcs-web.com
pmvpharma.gcs-web.com
praxismedicinesinvestorday.gcs-web.com
qudianinc.gcs-web.com
shareholders.stepstoneglobal.com
shareholders.stepstonegroup.com
shift.gcs-web.com
stepstonegroupinc.gcs-web.com
stevemadden.gcs-web.com
strategyday.meritor.com
sumologic.gcs-web.com
tattooedchef.gcs-web.com
textainergroupholdingsltd.gcs-web.com
uxinlimited.gcs-web.com
verdantearthtechnologies.gcs-web.com
vivusinc.gcs-web.com
yield10bioscienceinc.gcs-web.com
zosanopharmacorporation.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-34.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9rS5WRU0sNvAWlRZ2cX
G95APiM4mFqqDJ9iQuVzwoc9seca3U7wWK+8nvOI/nh8HDI+0Xkqhbt9DxA1ATnx
di1t6fAnvkyJ16AwkIwJAZi2hyMJ4VFqPzja1JY1E3bfr+K09+tfx4Sp9rWOnLUR
wvTyQyCE1Oe9XvWhRLFgCDBOh1idQUigDYGxPR3zYrPNZQ/d13Ko/M9y8IeRyuvv
hSTBqIaKMy2gl89v5kG+Kj0wuZK1SLLIvt1ZASqF+3kwB/y0nEvMKvGx4ZVbStAX
wpXkmEKI0smFj2WwPdBMkMjbZL/KiALC7HBXUO1lRlQx8aRSySUPkWoexFVkLRgI
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371747070891268473600507352815856133695565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 02:08:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 02:08:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24724375512158287135684547120279527181388254451880388239857860747664137085041333498945662646236502681544726472816219087506537728489914241163627991015732863871620759529338233757554918866299606485315403805023614349124475352146987040152052768155050037847870616474117006864330577554839613658266951166672785171879246057848606190552502702509853980868257683932078905401355539885721076713555472489426386435264313406114767760465453530835517317027863971261732217643386289608204395662746257455617571452034925189939315638841805876397608104891286831634574836734426852562939001291748922746285142164539334477395221783318221689456849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a33faee1888c5413788417a8ad72360b771ccaa6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2463 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.allegro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accolade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altagasinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apachecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentleysystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerevel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chobani.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspathways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echostar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpolloloco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonybiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houwire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iderapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agenusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apachecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.elpolloloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.harmonicinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.immunogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neworiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stevemadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sumologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.altagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aceragen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bentley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.boltbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chobani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cogentbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.collectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluidigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.grab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.magnachip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.verdantearth.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.accolade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.c4therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ccm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.compasspathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corsair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.echostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.harmonybiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.houwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iderapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pmvpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tattooedchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yield10bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zosanopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfrog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnachipsemiconductorcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcbcholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movementday.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworientaleducationandtechnologygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsetmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneernaturalresourcescompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicinesinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstoneglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shift.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemadden.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategyday.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumologic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattooedchef.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinlimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdantearthtechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yield10bioscienceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zosanopharmacorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187119729c4000004030046304402203c81972fa8a0af7d899bfcce009d32bcfc48bc52815fe49b4772aed90b75483a022033cc1c9620238c1b8dc02dadc69e79bdba0ad29c94ef5d06f63329c16b128ed8007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018711972a07000004030046304402206da8553d0f7c97610005fc782640b26e89410a6bf9b5055c5ca267632e25144402200d3d241e2bd6f40df36c7292ba6d1f3b7632fd7fa65ff5ab4ca99eb6376f1582
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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