leapfrog-ssl-51.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:30:a3:ea:33:a8:ef:82:96:20:0b:fa:e6:8b:f5:d9:5d:3e was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-51.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:a3:ea:33:a8:ef:82:96:20:0b:fa:e6:8b:f5:d9:5d:3e
Serial Number (int): 277888291616050970498343659558105610018110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:ae:e7:37:9d:9c:d4:bc:56:63:8a:e0:ad:e9:d2:0d:c1:05:4e:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:17:17:fe:86:15:07:bb:dd:90:07:00:47:40:ba:3b:e3:34:bc:f0
Fingerprint (sha256): 15:51:79:4f:16:9b:76:32:d5:83:27:05:7d:42:da:e4:5e:38:b4:6e:cb:e9:21:c0:3b:f8:9d:40:99:15:10:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-51.gcs-web.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-51.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.autozone.com
agmortgageinvestmenttrust.gcs-web.com
airindustriesgroup.gcs-web.com
alaskaairinvestorday.gcs-web.com
altmorecap.gcs-web.com
analystday.playtika.com
aqxpharma.gcs-web.com
autozone.gcs-web.com
bionomics.gcs-web.com
bluewatervaccines.gcs-web.com
cariloha.gcs-web.com
ccep.gcs-web.com
compasstherapeutics.gcs-web.com
constellationenergy.gcs-web.com
corecivic.gcs-web.com
cytosorbents.gcs-web.com
davidsteainc.gcs-web.com
dynastyfinancialpartners.gcs-web.com
fastradius.gcs-web.com
ftandi.gcs-web.com
gevo.gcs-web.com
hillevax.gcs-web.com
investor.cariloha.com
investor.neoleukin.com
investor.soundpointacquisition.com
investor.zimvie.com
investorday2022.alaskaair.com
investors.airindustriesgroup.com
investors.compasstherapeutics.com
investors.constellationenergy.com
investors.dynastyfinancialpartners.com
investors.gevo.com
investors.logicmark.com
investors.newagegroup.com
investors.nuvve.com
investors.oceanpowertechnologies.com
investors.primemedicine.com
investors.repertoire.com
investors.rigetti.com
investors.viridiantherapeutics.com
ir.arrowmarkfinancialcorp.com
ir.bionomics.com.au
ir.bluewatervaccines.com
ir.cocacolaep.com
ir.corecivic.com
ir.cytosorbents.com
ir.davidstea.com
ir.fastradius.com
ir.ftandi.com
ir.hillevax.com
ir.lucyscientific.com
ir.paramount.com
jackcreek.gcs-web.com
leapfrog-ssl-51.gcs-web.com
logicmark.gcs-web.com
lucyscientificdiscovery.gcs-web.com
netapp2022investorday.netapp.com
netappinvestorday.gcs-web.com
newage.gcs-web.com
news.smiledirectclub.com
nuvve.gcs-web.com
oceanpowertechnologies.gcs-web.com
playtikainvestorday.gcs-web.com
primemedicine.gcs-web.com
repertoire.gcs-web.com
rigetticomputing.gcs-web.com
smiledirectclubnewsroom.gcs-web.com
soundpointacquisition.gcs-web.com
stonecastlefinancial.gcs-web.com
viacbs.gcs-web.com
viridiantherapeutics.gcs-web.com
wglholdingsinc.gcs-web.com
www.agmit.com
www.agmortgageinvestmenttrust.com
www.jackcreekinvestmentcorp.com
www.soundpointacquisition.com
www.wglholdings.com
zimvie.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-51.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyolWb8qcEuh7sgsdW/8f
z+lgssY1cRYMLx+AArBfftCBt6+WotMBNYS/cvfA2LQaVWzX8Ux6+UzaU+qzOjJ1
5LDI8Fas9SM0NMx5JBap6QB4GcfypBtFY4qbbN3SEHP5yCLbRKRdNx4O+PmJC2lC
Ux1uRpo2JRcLQ4DNkDfWAra1FwP8b2xmzLeAd7+I88JIW+CFnY0+vAtPYx+M2KzN
SnGK2LaKACPhF/8VDcaWrw5w94ygQpAusKIRrRtlp6FrFItnnlG95Omy2Fuf8ei6
jsqnKZ8SzXw+Mf4nsv7lDMkXIdqGjt5Webu6TABQGeMK+S/sfNx9Jar4dSrQR/E4
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277888291616050970498343659558105610018110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 12:49:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 12:49:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25567861319153551081691282831456908605673196147201165385496671115192471509858385161652119524632934312866817830328115643041382383517366651660159672297059217302937327178059916419005436369168177620191728657304144481253347720579213953169829290743891380195409147056044066677457536365097758776409942397040660538872044946219600234546980910524034868180172206846343454239763532353954343348454002871817746410838126097591215126425780368178073822477808842286591290240031784943827219424654260874577551249111972749645861654312266874748786336309516949800052662014632924706275098224360406766789600739578180922366567107101884807198873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3aee7379d9cd4bc56638ae0ade9d20dc1054ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2085 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.autozone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agmortgageinvestmenttrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airindustriesgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaairinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altmorecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analystday.playtika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqxpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autozone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluewatervaccines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariloha.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccep.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasstherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corecivic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytosorbents.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidsteainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynastyfinancialpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastradius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftandi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillevax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariloha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neoleukin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.zimvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2022.alaskaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.airindustriesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.compasstherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.constellationenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dynastyfinancialpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.logicmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.newagegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nuvve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanpowertechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.primemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repertoire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rigetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viridiantherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arrowmarkfinancialcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionomics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluewatervaccines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cocacolaep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corecivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cytosorbents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.davidstea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fastradius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ftandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hillevax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucyscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackcreek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicmark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyscientificdiscovery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapp2022investorday.netapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netappinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newage.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.smiledirectclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvve.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanpowertechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtikainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primemedicine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repertoire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigetticomputing.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiledirectclubnewsroom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundpointacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonecastlefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viridiantherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wglholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmortgageinvestmenttrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackcreekinvestmentcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wglholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimvie.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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