leapfrog-ssl-46.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:55:3b:8b:d2:c0:d0:2d:04:5a:26:78:af:cc:c2:ac:65:a3 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-46.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:3b:8b:d2:c0:d0:2d:04:5a:26:78:af:cc:c2:ac:65:a3
Serial Number (int): 290340009439157406985646939831312472368547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:e0:c9:97:fa:84:c9:15:66:75:f4:21:e7:76:f7:28:41:3c:dd:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:cd:f6:c8:47:d4:e0:08:fd:d8:da:6e:07:f1:1f:48:a0:8f:de:dc
Fingerprint (sha256): 11:52:d2:d2:60:3d:1f:2f:62:f6:9f:7d:ec:fe:bd:44:fb:31:bb:27:b2:37:24:70:39:31:d5:eb:12:f2:53:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-46.gcs-web.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-46.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absci.gcs-web.com
acumenpharm.gcs-web.com
astraspace.gcs-web.com
bbwinc.gcs-web.com
bettertx.gcs-web.com
candeltx.gcs-web.com
couchbaseinc.gcs-web.com
cvrx.gcs-web.com
digitalbridge.gcs-web.com
elicio.gcs-web.com
investor.astra.com
investors.absci.com
investors.acumenpharm.com
investors.bbwinc.com
investors.bettertx.com
investors.couchbase.com
investors.matterport.com
investors.orangebanktrust.com
investors.rapidmicrobio.com
investors.sharecare.com
investors.tecnoglass.com
ir.candeltx.com
ir.cvrx.com
ir.digitalbridge.com
ir.elicio.com
ir.huohua.cn
ir.linkdoc.com
ir.lucidmotors.com
ir.perspectum.com
ir.sophiagenetics.com
ir.tangotx.com
leapfrog-ssl-46.gcs-web.com
linkdoc.gcs-web.com
loganridgefinance.gcs-web.com
lucidmotors.gcs-web.com
matterport.gcs-web.com
orangebanktrust.gcs-web.com
perspectumdiagnosticsltd.gcs-web.com
pressroom.threevalleycopper.com
rapidmicrobio.gcs-web.com
sharecare.gcs-web.com
sophiagenetics.gcs-web.com
sparkeducation.gcs-web.com
tangotx.gcs-web.com
tecnoglass.gcs-web.com
threevalleycopper.gcs-web.com
www.bbwinc.com
www.loganridgefinance.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-46.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qJK6Z2smAkOOUqWGuOI
V2vVAPtII4LjMCXUj/3+5KvvKI/lfpBrLQE+Dqmofygb5jrPmeIK7u6/dG0n5ZJK
Z+eWl7niU1CgwaRL8+QY9ZeSgwb4Cj+KoDey9VSY3OnUtI0PfD/I+xblfT3sdlAY
yrT9HSzWBFVOh9SGAeEdzuh0smBSdD+WuFZDbkN9px9C4EskFfWxeL6FZg0v96Xf
yGlozIUIxesH/ucjtyFW+9iO0x7txUEJklRcsatZRp0cMTvsoAi1ioYVbFWB4Kik
9omZ44t0mILrm8nkKD6a6YNWxbUXH6jA+r4ks3HARNL8lOACrAP7RUlqsxUzQj8I
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290340009439157406985646939831312472368547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 14:39:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 14:39:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29619792839267511390213760360017897369532020234342739583231310639103820533359075434692396872440826287606824634042064047314135892717768012170867653729788491724434445043779326359722175114928060402496867343784453351749111123000603902370884338626496782398585858383282003793175277669276237666641089330637934271164182052740625788431010810947486502664831526997532188614543114936014376516739789078543788375059796558150336918756409069391009263112258223587544442497281595088957268235794943030435521894263219088977551368222517025898487797047849152605183345233652447848212735028033442927689720206843050438577325933672020316195061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18e0c997fa84c9156675f421e776f728413cdd0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absci.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumenpharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astraspace.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbwinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettertx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candeltx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couchbaseinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvrx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbridge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elicio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.astra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.absci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acumenpharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bettertx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.couchbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.matterport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orangebanktrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rapidmicrobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sharecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tecnoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.candeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cvrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.digitalbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.elicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huohua.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.linkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucidmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.perspectum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sophiagenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tangotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-46.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdoc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganridgefinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matterport.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangebanktrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectumdiagnosticsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.threevalleycopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmicrobio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharecare.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophiagenetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkeducation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnoglass.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threevalleycopper.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbwinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loganridgefinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017aaad25c1a0000040300483046022100a1dd346799cfb046301fd9256f9151ac3b760d273188c9d20860d5302f55a7cc022100dbf3cfdbcde9d366e733045cc3a75ba6896126bb503731e18b6d24efe4ca7aef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017aaad25c17000004030046304402203644192180a30d10b2c51a12662ac2d83d1dea9b49acdf00bc06177a89c8b2fc02204aafd8498bd44b3db64a320f0f339e55c6cbdd99204c4ab72a894efba8d5a050
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007cfb511eed066133c242c6b5c21eadefb23fc21174d411de8e6983554eada5a1b11baca44290d5a1a47962c9e872580c7f5afe1132e9a5f4a0106e7b170bf344b1d2a41e7dccf201fbbfc2146a8b257d9da954a06f0c3eb7778f456a98fa727e8525fa814692dc17b3d8d7ba359668076b0fa61062528d5b7c7f5853ec099b6ac91fb662f392a093f02cfb66b02a979197a62bccb98e347069a15b1f3a15200437e72128fb15b47d57c66bb2c8efe2cb3bdba347fb21a5d1b099ef5e3435b5569758d22cb1745a236e598325c12a357ecc9de7238c31697f0a025285983d176c357e14c46612e2ab491b080f0d3e5257805a2711a919e319c07bb87230deb043