leapfrog-ssl-36.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:78:6a:55:46:c3:0b:1d:c0:dc:6f:d7:43:88:59:61:f7:6c was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-36.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:6a:55:46:c3:0b:1d:c0:dc:6f:d7:43:88:59:61:f7:6c
Serial Number (int): 389424368705561382995592766061070312929132
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:ff:76:9b:b0:a8:a2:ee:6e:59:0a:97:f2:b3:b4:0f:35:05:9a:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:84:1d:bf:97:d5:f4:a9:a8:8c:e6:7b:d5:75:92:c5:17:ad:2a:4c
Fingerprint (sha256): 13:1f:0d:dd:cd:10:89:9b:15:12:ad:d4:80:68:8f:01:e2:57:de:89:77:49:61:31:5d:7a:0c:0c:a7:f0:a4:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-36.gcs-web.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-36.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acornsgrow.gcs-web.com
aligostherapeutics.gcs-web.com
allakos.gcs-web.com
ambarella.gcs-web.com
arcadiabiosciencesinc.gcs-web.com
arenapharm.gcs-web.com
arraytechnologiesinc.gcs-web.com
axonicsmodulation.gcs-web.com
backblaze.gcs-web.com
eargo.gcs-web.com
elo.gcs-web.com
endologix.gcs-web.com
fmbank.gcs-web.com
foghorntx.gcs-web.com
genmarkdiagnosticsinc.gcs-web.com
glpropinc.gcs-web.com
henryschein.gcs-web.com
invest.arenapharm.com
investor.aligos.com
investor.allakos.com
investor.ambarella.com
investor.arenapharm.com
investor.endologix.com
investor.henryschein.com
investor.lgihomes.com
investor.praxismedicines.com
investor.startek.com
investor.xilinx.com
investors.elo.co
investors.glpropinc.com
investors.praxismedicines.com
investors.pulsebiosciences.com
investors.ravenind.com
investors.sciplay.com
investors.sprucebiosciences.com
investors.theoncologyinstitute.com
investors.troweprice.com
ir.acorns.com
ir.arcadiabio.com
ir.arraytechinc.com
ir.axonics.com
ir.backblaze.com
ir.eargo.com
ir.fm.bank
ir.foghorntx.com
ir.landec.com
ir.latticesemi.com
ir.medicenna.com
ir.neogames.com
ir.praxismedicines.com
ir.sonomotors.com
ir.travere.com
ir.willdangroup.com
landeccorporation.gcs-web.com
latticesemi.gcs-web.com
leapfrog-ssl-36.gcs-web.com
lgihomes.gcs-web.com
medicennatherapeutics.gcs-web.com
natera.gcs-web.com
neogames.gcs-web.com
newsroom.saputo.com
nuvasiveinc.gcs-web.com
praxismedicines.gcs-web.com
pulsebiosciences.gcs-web.com
ravenindustriesinc.gcs-web.com
redfincorp.gcs-web.com
rockyniri.gcs-web.com
saputo.gcs-web.com
sciplay.gcs-web.com
shattucklabs.gcs-web.com
sonomotors.gcs-web.com
sprucebiosciences.gcs-web.com
startek.gcs-web.com
toimanagement.gcs-web.com
travere.gcs-web.com
troweprice.gcs-web.com
willdangroupinc.gcs-web.com
www.rockyniri.org
xilinx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-36.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILTDCCCjSgAwIBAgISBHhqVUbDCx3A3G/XQ4hZYfdsMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDUwMjAxNThaFw0yNDA1MDUwMjAxNTdaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC0zNi5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpFXJd8Ub/tis5q6eKBLeMRrXGZHS9qcPTxNCruMbFirdvD
NYajXEkcXrk2bp1PzyRnDYOBWXvskSRqmBK4QEfHZRk2/DalXDqcB2ahpq5uuAl+
DRKLgRADng1b8d9AWaXN33RzbVKRAMD2CyWAk5OUutv1N1FdwkDw1mQ+N8orwBL+
DX7YUjIHT/Jn01U4booKAY84q7rWJiOrPqoq3LO/mwsKqlh3rFUuBQA19TpUL8Ir
UoG4jCUM/lvsZKP/JVdI8PoshUASXH19DhSmYcSfGuIm1Lm1CzplNqYjlpk2lb6Z
frEVlfodDWRZhS0uTOTxvjnfHUgVoDGCH1haTW8CAwEAAaOCCGYwgghiMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUov92m7Coou5uWQqX8rO0DzUFmiwwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggdgBgNVHREEggdXMIIHU4IWYWNvcm5zZ3Jvdy5nY3Mt
d2ViLmNvbYIeYWxpZ29zdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghNhbGxha29z
Lmdjcy13ZWIuY29tghVhbWJhcmVsbGEuZ2NzLXdlYi5jb22CIWFyY2FkaWFiaW9z
Y2llbmNlc2luYy5nY3Mtd2ViLmNvbYIWYXJlbmFwaGFybS5nY3Mtd2ViLmNvbYIg
YXJyYXl0ZWNobm9sb2dpZXNpbmMuZ2NzLXdlYi5jb22CHWF4b25pY3Ntb2R1bGF0
aW9uLmdjcy13ZWIuY29tghViYWNrYmxhemUuZ2NzLXdlYi5jb22CEWVhcmdvLmdj
cy13ZWIuY29tgg9lbG8uZ2NzLXdlYi5jb22CFWVuZG9sb2dpeC5nY3Mtd2ViLmNv
bYISZm1iYW5rLmdjcy13ZWIuY29tghVmb2dob3JudHguZ2NzLXdlYi5jb22CIWdl
bm1hcmtkaWFnbm9zdGljc2luYy5nY3Mtd2ViLmNvbYIVZ2xwcm9waW5jLmdjcy13
ZWIuY29tghdoZW5yeXNjaGVpbi5nY3Mtd2ViLmNvbYIVaW52ZXN0LmFyZW5hcGhh
cm0uY29tghNpbnZlc3Rvci5hbGlnb3MuY29tghRpbnZlc3Rvci5hbGxha29zLmNv
bYIWaW52ZXN0b3IuYW1iYXJlbGxhLmNvbYIXaW52ZXN0b3IuYXJlbmFwaGFybS5j
b22CFmludmVzdG9yLmVuZG9sb2dpeC5jb22CGGludmVzdG9yLmhlbnJ5c2NoZWlu
LmNvbYIVaW52ZXN0b3IubGdpaG9tZXMuY29tghxpbnZlc3Rvci5wcmF4aXNtZWRp
Y2luZXMuY29tghRpbnZlc3Rvci5zdGFydGVrLmNvbYITaW52ZXN0b3IueGlsaW54
LmNvbYIQaW52ZXN0b3JzLmVsby5jb4IXaW52ZXN0b3JzLmdscHJvcGluYy5jb22C
HWludmVzdG9ycy5wcmF4aXNtZWRpY2luZXMuY29tgh5pbnZlc3RvcnMucHVsc2Vi
aW9zY2llbmNlcy5jb22CFmludmVzdG9ycy5yYXZlbmluZC5jb22CFWludmVzdG9y
cy5zY2lwbGF5LmNvbYIfaW52ZXN0b3JzLnNwcnVjZWJpb3NjaWVuY2VzLmNvbYIi
aW52ZXN0b3JzLnRoZW9uY29sb2d5aW5zdGl0dXRlLmNvbYIYaW52ZXN0b3JzLnRy
b3dlcHJpY2UuY29tgg1pci5hY29ybnMuY29tghFpci5hcmNhZGlhYmlvLmNvbYIT
aXIuYXJyYXl0ZWNoaW5jLmNvbYIOaXIuYXhvbmljcy5jb22CEGlyLmJhY2tibGF6
ZS5jb22CDGlyLmVhcmdvLmNvbYIKaXIuZm0uYmFua4IQaXIuZm9naG9ybnR4LmNv
bYINaXIubGFuZGVjLmNvbYISaXIubGF0dGljZXNlbWkuY29tghBpci5tZWRpY2Vu
bmEuY29tgg9pci5uZW9nYW1lcy5jb22CFmlyLnByYXhpc21lZGljaW5lcy5jb22C
EWlyLnNvbm9tb3RvcnMuY29tgg5pci50cmF2ZXJlLmNvbYITaXIud2lsbGRhbmdy
b3VwLmNvbYIdbGFuZGVjY29ycG9yYXRpb24uZ2NzLXdlYi5jb22CF2xhdHRpY2Vz
ZW1pLmdjcy13ZWIuY29tghtsZWFwZnJvZy1zc2wtMzYuZ2NzLXdlYi5jb22CFGxn
aWhvbWVzLmdjcy13ZWIuY29tgiFtZWRpY2VubmF0aGVyYXBldXRpY3MuZ2NzLXdl
Yi5jb22CEm5hdGVyYS5nY3Mtd2ViLmNvbYIUbmVvZ2FtZXMuZ2NzLXdlYi5jb22C
E25ld3Nyb29tLnNhcHV0by5jb22CF251dmFzaXZlaW5jLmdjcy13ZWIuY29tghtw
cmF4aXNtZWRpY2luZXMuZ2NzLXdlYi5jb22CHHB1bHNlYmlvc2NpZW5jZXMuZ2Nz
LXdlYi5jb22CHnJhdmVuaW5kdXN0cmllc2luYy5nY3Mtd2ViLmNvbYIWcmVkZmlu
Y29ycC5nY3Mtd2ViLmNvbYIVcm9ja3luaXJpLmdjcy13ZWIuY29tghJzYXB1dG8u
Z2NzLXdlYi5jb22CE3NjaXBsYXkuZ2NzLXdlYi5jb22CGHNoYXR0dWNrbGFicy5n
Y3Mtd2ViLmNvbYIWc29ub21vdG9ycy5nY3Mtd2ViLmNvbYIdc3BydWNlYmlvc2Np
ZW5jZXMuZ2NzLXdlYi5jb22CE3N0YXJ0ZWsuZ2NzLXdlYi5jb22CGXRvaW1hbmFn
ZW1lbnQuZ2NzLXdlYi5jb22CE3RyYXZlcmUuZ2NzLXdlYi5jb22CFnRyb3dlcHJp
Y2UuZ2NzLXdlYi5jb22CG3dpbGxkYW5ncm91cGluYy5nY3Mtd2ViLmNvbYIRd3d3
LnJvY2t5bmlyaS5vcmeCEnhpbGlueC5nY3Mtd2ViLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
slefPVTG2zhQRS9vdBeKLlWKG9Ack4dAnh3P9ofpelTxct5Pbolmwjt3AnUVhywj
xhqkzlNWYdlNxjO9sZH3+AQ61GTfdHjdfi5+a9oo1w/TKcLBxZhWnDMqnBsdVhgg
rth5VV7iRCsTrlVUSE8iGsLmlNeKNxt+GaxG9U2kxnSkCuPdN6tPM0SeiNSt2Ibg
QvfcYe26xBaEw2sMsEvdw23ww4vAwNkwKujFpD7HnvMJpLyW/e08CrHcq+thadTI
4/hdZAAPJQpRgHzh41dcqX5ee53ZXldNM6d8MnwVjRNcBwUGcRItxe2Kk5bmfFAx
n8Ey5qPVqetnYhoAURoUwA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkVcl3xRv+2Kzmrp4oEt
4xGtcZkdL2pw9PE0Ku4xsWKt28M1hqNcSRxeuTZunU/PJGcNg4FZe+yRJGqYErhA
R8dlGTb8NqVcOpwHZqGmrm64CX4NEouBEAOeDVvx30BZpc3fdHNtUpEAwPYLJYCT
k5S62/U3UV3CQPDWZD43yivAEv4NfthSMgdP8mfTVThuigoBjzirutYmI6s+qirc
s7+bCwqqWHesVS4FADX1OlQvwitSgbiMJQz+W+xko/8lV0jw+iyFQBJcfX0OFKZh
xJ8a4ibUubULOmU2piOWmTaVvpl+sRWV+h0NZFmFLS5M5PG+Od8dSBWgMYIfWFpN
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389424368705561382995592766061070312929132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 02:01:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 02:01:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19474902487162582625894212944854755545688285393267905215842553283573911157905606964991615843782474762040461358276159060888709170100405258693049120555166683616567536760819870721791879995607112741662913798801474788901850956426513238123577535631805113377088518091252197581598103854370675119745656018978377319878581189640978014432276963273527263271611307786845247503263210788952779893752005453300297902377989697922220821592228806653708958724736165617315401605877199609136057357736186403607202299592915135697003838257692154063569588965609506261863428232574965207794212853018434462267671066801681039202326548212132139912559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2ff769bb0a8a2ee6e590a97f2b3b40f35059a2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1879 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acornsgrow.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligostherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allakos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambarella.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadiabiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arraytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axonicsmodulation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backblaze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eargo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foghorntx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmarkdiagnosticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glpropinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryschein.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aligos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allakos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ambarella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.henryschein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lgihomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.startek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xilinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.elo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.glpropinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulsebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ravenind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sciplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.theoncologyinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.troweprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.acorns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcadiabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arraytechinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.backblaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fm.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.foghorntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.landec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.medicenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sonomotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.travere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.willdangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landeccorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgihomes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicennatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neogames.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.saputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvasiveinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravenindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfincorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockyniri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saputo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciplay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattucklabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toimanagement.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travere.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troweprice.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willdangroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockyniri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilinx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b2579f3d54c6db3850452f6f74178a2e558a1bd01c9387409e1dcff687e97a54f172de4f6e8966c23b77027515872c23c61aa4ce535661d94dc633bdb191f7f8043ad464df7478dd7e2e7e6bda28d70fd329c2c1c598569c332a9c1b1d561820aed879555ee2442b13ae5554484f221ac2e694d78a371b7e19ac46f54da4c674a40ae3dd37ab4f33449e88d4add886e042f7dc61edbac41684c36b0cb04bddc36df0c38bc0c0d9302ae8c5a43ec79ef309a4bc96fded3c0ab1dcabeb6169d4c8e3f85d64000f250a51807ce1e3575ca97e5e7b9dd95e574d33a77c327c158d135c07050671122dc5ed8a9396e67c50319fc132e6a3d5a9eb67621a00511a14c0