leapfrog-ssl-33.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:18:28:cf:d0:f0:2c:95:7a:ae:66:27:09:5c:f3:f2:21:e8 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-33.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:28:cf:d0:f0:2c:95:7a:ae:66:27:09:5c:f3:f2:21:e8
Serial Number (int): 356670168696194377666547802891227157897704
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:58:71:05:15:7f:09:ee:ea:96:81:64:8d:7d:f2:29:08:03:20:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2b:4b:c0:3b:90:4a:fc:59:ad:43:d6:80:ee:26:b0:f3:5b:af:43:33
Fingerprint (sha256): 14:d3:06:a5:e4:27:eb:ef:65:54:ae:7a:e8:2a:ef:2d:ea:cf:9c:09:1a:77:73:0c:22:42:37:cd:d7:86:b9:09

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-33.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-33.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahbelocorporation.gcs-web.com
allovir.gcs-web.com
bitautoholdingslimited.gcs-web.com
carrols.gcs-web.com
catalystbiosciencesinc.gcs-web.com
checkmatepharma.gcs-web.com
churchilldownsincorporated.gcs-web.com
colonycapital.gcs-web.com
constellationpharmaceuticals.gcs-web.com
consumerportfolioservicesinc.gcs-web.com
cowen.gcs-web.com
crinetics.gcs-web.com
decibeltherapeutics.gcs-web.com
duckcreek.gcs-web.com
dynetx.gcs-web.com
fennecpharmaceuticalsinc.gcs-web.com
firsthawaiianinc.gcs-web.com
flir.gcs-web.com
healthstreaminc.gcs-web.com
ibexglobal.gcs-web.com
inozymepharma.gcs-web.com
investor.ahbelo.com
investor.carrols.com
investor.cowen.com
investor.pinduoduo.com
investor.streamlinehealth.net
investor.universalcorp.com
investorrelations.medtronic.com
investors.dyne-tx.com
investors.fennecpharma.com
investors.flir.com
investors.ibex.co
investors.inozyme.com
investors.invivotherapeutics.com
investors.luminartech.com
investors.marchex.com
investors.merrimack.com
investors.merrimackpharma.com
investors.nanox.vision
investors.oasismidstream.com
investors.predictive-oncology.com
investors.soleno.life
investors.tcr2.com
invivotherapeutics.gcs-web.com
ir.allovir.com
ir.bitauto.com
ir.catalystbiosciences.com
ir.checkmatepharma.com
ir.churchilldownsincorporated.com
ir.clny.com
ir.constellationpharma.com
ir.consumerportfolio.com
ir.crinetics.com
ir.decibeltx.com
ir.duckcreek.com
ir.fhb.com
ir.healthstream.com
ir.lixiang.com
ir.npcinternational.com
ir.nurixtx.com
ir.prothena.com
ir.quanterix.com
ir.transenterix.com
ir.twindisc.com
ir.vastaplatform.com
ir.vertexinc.com
kcapfinancial.gcs-web.com
leapfrog-ssl-33.gcs-web.com
liauto.gcs-web.com
luminartech.gcs-web.com
marchex.gcs-web.com
medtronic.gcs-web.com
merrimack.gcs-web.com
nano-ximaging.gcs-web.com
newsroom.medtronic.com
npcinternationalinc.gcs-web.com
nurixtx.gcs-web.com
oasismidstreampartners.gcs-web.com
oilstatesintl.gcs-web.com
pinduoduo.gcs-web.com
prothena.gcs-web.com
quanterixcorporation.gcs-web.com
skylinemedicalinc.gcs-web.com
snowflake.gcs-web.com
soleno.gcs-web.com
streamlinehealth.gcs-web.com
tcr2.gcs-web.com
transenterixinc.gcs-web.com
twindisc.gcs-web.com
universalcorp.gcs-web.com
vastaedu.gcs-web.com
vertexinc.gcs-web.com
www.ir.oilstatesintl.com
www.portmanridge.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-33.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKufbKD7uj9OwMb/ZlFv
/b1RAo7aQAv70EHA+50uPBpr+SEkOkgdfDSOmt46JCsMUACPNrDl5PZTWMcmOQKV
YadkSuRMdopI7dbq/g4VjtGQ/gdBQr9NCb647VEqGkfBOGFcTHfCTOkud/iNrNYb
wOEmFXAYy1z86HDPmlyaGpi4zx+/1gL60+oTE1XjJGyIe/x6iGUZ4RFu8o6KmSo6
gBMTLmgUNU1NMkf+rCGgF2PtHbg7Jag8KR/Ax9TwvbvhFKqZOvkidNXNrEktUmzC
3BjrQKa9QEnsnL0/ffyQjmtsiNGWmEbmk1fGyBuBZ98LE38HA8x68zmdq/P2Leme
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356670168696194377666547802891227157897704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 13:13:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 13:13:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20282759127448434979618695383661359505772150200192868357083735781518527636381380721214698488864506006727250709021745382374828548117260389010351677517095625263726711054612340649368210087189068761488614757777698036754085802775928839815095415680846768406514658064821686592228128464591258928468751599040344508376112519547153221706710104412210886517878316962109486695078020720541835402409509997903443629012844747583844214503752238447509512106861512123469734910003130364360993296091050239955943124567242915601662170430847903663872936156987836629106200026015009316512672617139769526115388583690625399288196979387614745960101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3587105157f09eeea9681648d7df22908032086
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbelocorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allovir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitautoholdingslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrols.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystbiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmatepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchilldownsincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonycapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerportfolioservicesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crinetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decibeltherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckcreek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fennecpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthawaiianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthstreaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibexglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inozymepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ahbelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.carrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cowen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pinduoduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.streamlinehealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.universalcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dyne-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fennecpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ibex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.inozyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.invivotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.luminartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marchex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimackpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nanox.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oasismidstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.predictive-oncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.soleno.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tcr2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invivotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allovir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bitauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.checkmatepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.churchilldownsincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.constellationpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.consumerportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crinetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.decibeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.duckcreek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lixiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.npcinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nurixtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prothena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.quanterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.transenterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.twindisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vastaplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vertexinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcapfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminartech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medtronic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrimack.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nano-ximaging.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurixtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasismidstreampartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilstatesintl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinduoduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prothena.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanterixcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylinemedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowflake.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soleno.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamlinehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcr2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenterixinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twindisc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastaedu.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertexinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.oilstatesintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portmanridge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177728a14e30000040300473045022100c464ca1530e0eaace17852fc2a04d0352800c053ab1a2a0b5506a5903c8d000b0220580752b0ab669819a3ca0ab6dbce6072b730f3896ca2460fe0c69f818eec20ff0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000177728a14a30000040300473045022100e35d0f053779a7f5ed03ae1ab5604526c5e489b8b70e55e03afb5255d391f4df02205e678abdaa073f74876ee8e1dd860ddbcdddfe94138140e85e6ff3507dbc84b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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