leapfrog-ssl-44.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:d0:f8:26:9d:f2:e4:da:51:eb:d1:77:22:c3:1e:73:31 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-44.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:d0:f8:26:9d:f2:e4:da:51:eb:d1:77:22:c3:1e:73:31
Serial Number (int): 337837875881560693386437164787620565119793
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:b2:32:ba:69:39:3b:73:29:08:50:dd:d7:a9:21:fd:df:7e:53:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:6a:29:08:27:01:03:3c:c2:4b:a9:30:14:24:b1:cd:e9:32:82:41
Fingerprint (sha256): 14:1e:57:ac:2f:c0:65:42:ec:d8:d7:6a:d4:c2:23:37:8d:86:62:5f:9a:0b:7a:0e:2a:15:44:3a:3e:85:45:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-44.gcs-web.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-44.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.challenger.com.au
amunix.gcs-web.com
anikatherapeuticsincinvestorday.gcs-web.com
caladrius.gcs-web.com
castlecreekbiosciences.gcs-web.com
centessapharmaceuticals.gcs-web.com
challengerinvestorday.gcs-web.com
ciphermining.gcs-web.com
codexdna.gcs-web.com
contexttherapeutics.gcs-web.com
dayone.gcs-web.com
duolingo.gcs-web.com
enact.gcs-web.com
evercommerce.gcs-web.com
firstadvantagecorp.gcs-web.com
flywire.gcs-web.com
foruworldwideinc.gcs-web.com
genenta.gcs-web.com
globaleonlineltd.gcs-web.com
harrowinc.gcs-web.com
heidrick.gcs-web.com
huvepharmaeood.gcs-web.com
investor.roivant.com
investor.sagimet.com
investor.singulargenomics.com
investorday2021.suncor.com
investors.centessa.com
investors.ciphermining.com
investors.duolingo.com
investors.evercommerce.com
investors.fadv.com
investors.global-e.com
investors.harrowinc.com
investors.heidrick.com
investors.marketwise.com
investors.marqeta.com
investors.monsterbevcorp.com
investors.nautilus.bio
investors.oatly.com
investors.renovorx.com
investors.reservoir-media.com
investors.rxsight.com
investors.sightsciences.com
investors.somalogic.com
investors.tegna.com
investors.vailresorts.com
investors.vimeo.com
ir.amunix.com
ir.caladrius.com
ir.castlecreekbio.com
ir.codexdna.com
ir.contexttherapeutics.com
ir.dayonebio.com
ir.enactmi.com
ir.flywire.com
ir.for-u.com
ir.genenta.com
ir.huvepharma.com
ir.katapultholdings.com
ir.lottery.com
ir.qiniu.com
ir.rotech.com
ir.teknova.com
ir.vervetx.com
ir.walkme.com
katapultholdings.gcs-web.com
leapfrog-ssl-44.gcs-web.com
lottery.gcs-web.com
marketwise.gcs-web.com
marqeta.gcs-web.com
monsterenergycompany.gcs-web.com
nautilusbio.gcs-web.com
oatlygroup.gcs-web.com
qiniulimited.gcs-web.com
renovorx.gcs-web.com
reservoirmedia.gcs-web.com
roivant.gcs-web.com
rotech.gcs-web.com
rxsight.gcs-web.com
sagimetbiosciences.gcs-web.com
sightsciences.gcs-web.com
singulargenomics.gcs-web.com
somalogic.gcs-web.com
suncor.gcs-web.com
tegna.gcs-web.com
teknova.gcs-web.com
vailresortsinc.gcs-web.com
vervetx.gcs-web.com
vimeo.gcs-web.com
walkme.gcs-web.com
www.anikainvestorday.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-44.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b1irlCI3onxuU1k4uEb
sm/h+J5zdlua17Q3dEwJ1w1XmDQSfZZr5XMA9QmeC+aQKuFUP+AXuEktN/j1Zd7q
oOk8aYfQL5Me4wqfGONJILoD7Xg+ntDhhXjjsRw5McHq33KR0iQAeoeeJvj0kRtg
ecBtr9NPbRO6IWelPJf6NQPuqk78b6mZA06SRk478EBEAMxy5lPBEKM74iafKCiP
CtxmX/99xhzuJsfBfKJq0ev938zqAYnx+vuFFjmRu0BGjKxsOqn/fUiNH9dEfhKh
qV/2Rn7IcP+WuBdgWIASx24p5t81akYjr9X2Cbz+QN6yC+QRu5NN9mLpz5ENMah4
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337837875881560693386437164787620565119793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 13:15:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-05 13:15:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26477195194984677834614773181064014242410031932788469412214352459561879793283341827084835445317088016393746353607054136910978483642851397300825722350320640355899604789320278554626718304071128433514705351204559985536223139376440530191832298692201352302059673975155583771065445416852019902971659018361381498461831694885566753506829878003327795975697132518800143662806875086728825207919229032322966008450705699517050381805307737235415647150910787932749079931965980768342660201521009784333135765718035903670813308761159487744979524731722967428391168907542973339004622251001780852495947558187950375966993579244536698796243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88b232ba69393b73290850ddd7a921fddf7e5318
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amunix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikatherapeuticsincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caladrius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlecreekbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centessapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciphermining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexdna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duolingo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enact.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evercommerce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstadvantagecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flywire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foruworldwideinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genenta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaleonlineltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrowinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidrick.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huvepharmaeood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.roivant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.singulargenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.suncor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ciphermining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.duolingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.evercommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.global-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harrowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heidrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marketwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marqeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.monsterbevcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nautilus.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oatly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renovorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.reservoir-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rxsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sightsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.somalogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tegna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vailresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amunix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caladrius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlecreekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexdna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.contexttherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dayonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enactmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.for-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huvepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.katapultholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qiniu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.teknova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vervetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.walkme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katapultholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketwise.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marqeta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterenergycompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oatlygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiniulimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovorx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservoirmedia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roivant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagimetbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singulargenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somalogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tegna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vailresortsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vervetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anikainvestorday.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00956870d31a647fb57c902f4967f0c81332c088ffe37451958e9749d29af3c131bcc406110c04d19e1d0e050ca5f2f25a4eae07b09404edbb67c4fc07ddf017f964cde3d85e2cb1f704a368abf9e1dfba8ef9cfb6a38af13e6deae8bffb293eaa106e7a37ecbc2f5ac20296001654de2e6259950b3b51e1e567f76de73dd5fe65a75e7ccbdb5e929fa231908d0947b849f452ebaa94aff4aa27741c6f8b70dee77fa4ff8226507551e2777b8ab7893a2fdacf0f7e69bcb6303011839ebe3acf8531fe29b58f97ce3917ad088ea74993f8f952575fb80ba742cae314ae2455fd9ab7d902daa65bb378840a2d729348e9444316665aec86ea51743ca9567e575d80