leapfrog-ssl-51.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:30:b5:5b:e2:f5:88:37:fc:33:9c:b9:12:95:bb:c0:0b:57 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-51.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:b5:5b:e2:f5:88:37:fc:33:9c:b9:12:95:bb:c0:0b:57
Serial Number (int): 277911478777014610512939955982732498045783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:b3:d8:f9:b2:c4:ba:d2:93:c9:5a:c9:fe:39:82:ba:2b:52:55:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:30:4b:bf:54:0f:ce:94:de:99:76:e9:b6:1b:7d:ab:6a:45:d4:93
Fingerprint (sha256): 18:b3:f1:9f:64:11:d5:9c:63:bf:54:41:22:1f:77:78:2a:ee:1e:10:1a:90:75:e5:94:55:fc:8c:53:e6:13:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-51.gcs-web.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-51.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.autozone.com
agmortgageinvestmenttrust.gcs-web.com
airindustriesgroup.gcs-web.com
alaskaairinvestorday.gcs-web.com
altmorecap.gcs-web.com
analystday.playtika.com
appfolio.gcs-web.com
aqxpharma.gcs-web.com
autozone.gcs-web.com
bionomics.gcs-web.com
bluewatervaccines.gcs-web.com
cariloha.gcs-web.com
ccep.gcs-web.com
compasstherapeutics.gcs-web.com
constellationenergy.gcs-web.com
corecivic.gcs-web.com
cytosorbents.gcs-web.com
davidsteainc.gcs-web.com
fastradius.gcs-web.com
fbn.gcs-web.com
ftandi.gcs-web.com
gevo.gcs-web.com
hillevax.gcs-web.com
investor.neoleukin.com
investor.soundpointacquisition.com
investor.zimvie.com
investorday2022.alaskaair.com
investors.airindustriesgroup.com
investors.compasstherapeutics.com
investors.constellationenergy.com
investors.fbn.com
investors.gevo.com
investors.invivyd.com
investors.kalera.com
investors.logicmark.com
investors.nuvve.com
investors.oceanpowertechnologies.com
investors.onereal.com
investors.opalfuels.com
investors.primemedicine.com
investors.repertoire.com
investors.rigetti.com
investors.springbig.com
investors.thecoretecgroup.com
investors.viridiantherapeutics.com
investors.vno.com
invivyd.gcs-web.com
ir.appfolioinc.com
ir.arrowmarkfinancialcorp.com
ir.bionomics.com.au
ir.bluewatervaccines.com
ir.bwbioinc.com
ir.cocacolaep.com
ir.corecivic.com
ir.cytosorbents.com
ir.davidstea.com
ir.fastradius.com
ir.ftaiaviation.com
ir.ftandi.com
ir.hillevax.com
ir.lucyscientific.com
ir.nano.cn
ir.paramount.com
ir.thirdharmonicbio.com
jackcreek.gcs-web.com
joinreal.gcs-web.com
kalera.gcs-web.com
leapfrog-ssl-51.gcs-web.com
logicmark.gcs-web.com
lucyscientificdiscovery.gcs-web.com
nanolabs.gcs-web.com
netapp2022investorday.netapp.com
netappinvestorday.gcs-web.com
news.smiledirectclub.com
nuvve.gcs-web.com
oceanpowertechnologies.gcs-web.com
opalfuels.gcs-web.com
perfectcorp.gcs-web.com
playtikainvestorday.gcs-web.com
primemedicine.gcs-web.com
repertoire.gcs-web.com
rigetticomputing.gcs-web.com
smiledirectclubnewsroom.gcs-web.com
soundpointacquisition.gcs-web.com
springbig.gcs-web.com
stonecastlefinancial.gcs-web.com
thecoretecgroup.gcs-web.com
thirdharmonicbio.gcs-web.com
viacbs.gcs-web.com
viridiantherapeutics.gcs-web.com
vno.gcs-web.com
wglholdingsinc.gcs-web.com
www.agmit.com
www.agmortgageinvestmenttrust.com
www.jackcreekinvestmentcorp.com
www.soundpointacquisition.com
www.wglholdings.com
zimvie.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-51.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOojCCDYqgAwIBAgISAzC1W+L1iDf8M5y5EpW7wAtXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MjUxNjEzNTlaFw0yMzA5MjMxNjEzNThaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC01MS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2/y30puE62B0lWyMzsmdQJ7O616l1ZgmS806hQUCNlBqOP
plilH9KfbxS+KxAuiygeHRa30DLl+gtnRGykQuGhiCci5b0twan19TsO+iIIyxDJ
TTBrhVaR0ChUH7DWaLh6EVmGEZape/7OY5JwVF7FfLOOnDmGETJnEnzdWzmbXM59
7p7EwUQd916O1nUQNc4QacMPunOna1jTBc+gL7R+UmJVPkjE7zxPF/rrfHs5CXBJ
1fh80IL3++JxaMqR962YXNp55LmJmWZI+UrYXJWF0nhhcCdCz3JIV7GDCQACRgHU
PdRkEsQYTaP/XgKYdgKcynSVpvxph1mRdlbgPSMCAwEAAaOCC7wwggu4MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUYrPY+bLEutKTyVrJ/jmCuitSVe0wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggnDBgNVHREEggm6MIIJtoISYWJvdXQuYXV0b3pvbmUu
Y29tgiVhZ21vcnRnYWdlaW52ZXN0bWVudHRydXN0Lmdjcy13ZWIuY29tgh5haXJp
bmR1c3RyaWVzZ3JvdXAuZ2NzLXdlYi5jb22CIGFsYXNrYWFpcmludmVzdG9yZGF5
Lmdjcy13ZWIuY29tghZhbHRtb3JlY2FwLmdjcy13ZWIuY29tghdhbmFseXN0ZGF5
LnBsYXl0aWthLmNvbYIUYXBwZm9saW8uZ2NzLXdlYi5jb22CFWFxeHBoYXJtYS5n
Y3Mtd2ViLmNvbYIUYXV0b3pvbmUuZ2NzLXdlYi5jb22CFWJpb25vbWljcy5nY3Mt
d2ViLmNvbYIdYmx1ZXdhdGVydmFjY2luZXMuZ2NzLXdlYi5jb22CFGNhcmlsb2hh
Lmdjcy13ZWIuY29tghBjY2VwLmdjcy13ZWIuY29tgh9jb21wYXNzdGhlcmFwZXV0
aWNzLmdjcy13ZWIuY29tgh9jb25zdGVsbGF0aW9uZW5lcmd5Lmdjcy13ZWIuY29t
ghVjb3JlY2l2aWMuZ2NzLXdlYi5jb22CGGN5dG9zb3JiZW50cy5nY3Mtd2ViLmNv
bYIYZGF2aWRzdGVhaW5jLmdjcy13ZWIuY29tghZmYXN0cmFkaXVzLmdjcy13ZWIu
Y29tgg9mYm4uZ2NzLXdlYi5jb22CEmZ0YW5kaS5nY3Mtd2ViLmNvbYIQZ2V2by5n
Y3Mtd2ViLmNvbYIUaGlsbGV2YXguZ2NzLXdlYi5jb22CFmludmVzdG9yLm5lb2xl
dWtpbi5jb22CImludmVzdG9yLnNvdW5kcG9pbnRhY3F1aXNpdGlvbi5jb22CE2lu
dmVzdG9yLnppbXZpZS5jb22CHWludmVzdG9yZGF5MjAyMi5hbGFza2FhaXIuY29t
giBpbnZlc3RvcnMuYWlyaW5kdXN0cmllc2dyb3VwLmNvbYIhaW52ZXN0b3JzLmNv
bXBhc3N0aGVyYXBldXRpY3MuY29tgiFpbnZlc3RvcnMuY29uc3RlbGxhdGlvbmVu
ZXJneS5jb22CEWludmVzdG9ycy5mYm4uY29tghJpbnZlc3RvcnMuZ2V2by5jb22C
FWludmVzdG9ycy5pbnZpdnlkLmNvbYIUaW52ZXN0b3JzLmthbGVyYS5jb22CF2lu
dmVzdG9ycy5sb2dpY21hcmsuY29tghNpbnZlc3RvcnMubnV2dmUuY29tgiRpbnZl
c3RvcnMub2NlYW5wb3dlcnRlY2hub2xvZ2llcy5jb22CFWludmVzdG9ycy5vbmVy
ZWFsLmNvbYIXaW52ZXN0b3JzLm9wYWxmdWVscy5jb22CG2ludmVzdG9ycy5wcmlt
ZW1lZGljaW5lLmNvbYIYaW52ZXN0b3JzLnJlcGVydG9pcmUuY29tghVpbnZlc3Rv
cnMucmlnZXR0aS5jb22CF2ludmVzdG9ycy5zcHJpbmdiaWcuY29tgh1pbnZlc3Rv
cnMudGhlY29yZXRlY2dyb3VwLmNvbYIiaW52ZXN0b3JzLnZpcmlkaWFudGhlcmFw
ZXV0aWNzLmNvbYIRaW52ZXN0b3JzLnZuby5jb22CE2ludml2eWQuZ2NzLXdlYi5j
b22CEmlyLmFwcGZvbGlvaW5jLmNvbYIdaXIuYXJyb3dtYXJrZmluYW5jaWFsY29y
cC5jb22CE2lyLmJpb25vbWljcy5jb20uYXWCGGlyLmJsdWV3YXRlcnZhY2NpbmVz
LmNvbYIPaXIuYndiaW9pbmMuY29tghFpci5jb2NhY29sYWVwLmNvbYIQaXIuY29y
ZWNpdmljLmNvbYITaXIuY3l0b3NvcmJlbnRzLmNvbYIQaXIuZGF2aWRzdGVhLmNv
bYIRaXIuZmFzdHJhZGl1cy5jb22CE2lyLmZ0YWlhdmlhdGlvbi5jb22CDWlyLmZ0
YW5kaS5jb22CD2lyLmhpbGxldmF4LmNvbYIVaXIubHVjeXNjaWVudGlmaWMuY29t
ggppci5uYW5vLmNughBpci5wYXJhbW91bnQuY29tghdpci50aGlyZGhhcm1vbmlj
YmlvLmNvbYIVamFja2NyZWVrLmdjcy13ZWIuY29tghRqb2lucmVhbC5nY3Mtd2Vi
LmNvbYISa2FsZXJhLmdjcy13ZWIuY29tghtsZWFwZnJvZy1zc2wtNTEuZ2NzLXdl
Yi5jb22CFWxvZ2ljbWFyay5nY3Mtd2ViLmNvbYIjbHVjeXNjaWVudGlmaWNkaXNj
b3ZlcnkuZ2NzLXdlYi5jb22CFG5hbm9sYWJzLmdjcy13ZWIuY29tgiBuZXRhcHAy
MDIyaW52ZXN0b3JkYXkubmV0YXBwLmNvbYIdbmV0YXBwaW52ZXN0b3JkYXkuZ2Nz
LXdlYi5jb22CGG5ld3Muc21pbGVkaXJlY3RjbHViLmNvbYIRbnV2dmUuZ2NzLXdl
Yi5jb22CIm9jZWFucG93ZXJ0ZWNobm9sb2dpZXMuZ2NzLXdlYi5jb22CFW9wYWxm
dWVscy5nY3Mtd2ViLmNvbYIXcGVyZmVjdGNvcnAuZ2NzLXdlYi5jb22CH3BsYXl0
aWthaW52ZXN0b3JkYXkuZ2NzLXdlYi5jb22CGXByaW1lbWVkaWNpbmUuZ2NzLXdl
Yi5jb22CFnJlcGVydG9pcmUuZ2NzLXdlYi5jb22CHHJpZ2V0dGljb21wdXRpbmcu
Z2NzLXdlYi5jb22CI3NtaWxlZGlyZWN0Y2x1Ym5ld3Nyb29tLmdjcy13ZWIuY29t
giFzb3VuZHBvaW50YWNxdWlzaXRpb24uZ2NzLXdlYi5jb22CFXNwcmluZ2JpZy5n
Y3Mtd2ViLmNvbYIgc3RvbmVjYXN0bGVmaW5hbmNpYWwuZ2NzLXdlYi5jb22CG3Ro
ZWNvcmV0ZWNncm91cC5nY3Mtd2ViLmNvbYIcdGhpcmRoYXJtb25pY2Jpby5nY3Mt
d2ViLmNvbYISdmlhY2JzLmdjcy13ZWIuY29tgiB2aXJpZGlhbnRoZXJhcGV1dGlj
cy5nY3Mtd2ViLmNvbYIPdm5vLmdjcy13ZWIuY29tghp3Z2xob2xkaW5nc2luYy5n
Y3Mtd2ViLmNvbYINd3d3LmFnbWl0LmNvbYIhd3d3LmFnbW9ydGdhZ2VpbnZlc3Rt
ZW50dHJ1c3QuY29tgh93d3cuamFja2NyZWVraW52ZXN0bWVudGNvcnAuY29tgh13
d3cuc291bmRwb2ludGFjcXVpc2l0aW9uLmNvbYITd3d3LndnbGhvbGRpbmdzLmNv
bYISemltdmllLmdjcy13ZWIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0J
gSXttJkAAAGI84xSCgAABAMARzBFAiAiyxfOVW4FxiKrd6w+k0YkNlP1NKVQdl6f
FbO4UYPnVQIhAOw6WVrHe9n6iYUjqmBCQ0Pib/QZo9w+sde4ky/ThG8xAHYAejKM
VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGI84xSHAAABAMARzBFAiA9
Wyc7qSbH8i7jgzOtd7QmGMTYvrkxbNZ0d6beel0VhgIhALNyoz3YEat2De64Hodj
mjgz/mq/Gw/JzeJFr6S2K4eKMA0GCSqGSIb3DQEBCwUAA4IBAQAdEVnqi5aSxCOF
fIXBp0hCGSPhKVn92J5XIu7LzpCRvV1KwzTZWAEfAGKq3mueYHAg2ottj91mGGv7
4v0ofSCZoG4UuHViHiYr2IPzTm37227/CCm7vuSHtMDxZ9/c4DVSe0W9+LDX0TJf
Wt9YvME3y6LAivgjBRCcUh7rCWe2weLzpQDzKf7Lc5Gg+SjKDWT/Fb7+bvB3Z2GI
lQehN3gI9MyYKXYt3HM2mjLNNXLW0V1Gidax8+4wD3YJ7Pn6H0Z6B/TwdutZcYc5
pdt5Ad05UY1cT7Tr+8PnQIQQfe59q0AEwrmp+ebTzHZsFx8hzEF4S18Aj5jYBqwW
669ufrb7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb/LfSm4TrYHSVbIzOyZ
1Ans7rXqXVmCZLzTqFBQI2UGo4+mWKUf0p9vFL4rEC6LKB4dFrfQMuX6C2dEbKRC
4aGIJyLlvS3BqfX1Ow76IgjLEMlNMGuFVpHQKFQfsNZouHoRWYYRlql7/s5jknBU
XsV8s46cOYYRMmcSfN1bOZtczn3unsTBRB33Xo7WdRA1zhBpww+6c6drWNMFz6Av
tH5SYlU+SMTvPE8X+ut8ezkJcEnV+HzQgvf74nFoypH3rZhc2nnkuYmZZkj5Sthc
lYXSeGFwJ0LPckhXsYMJAAJGAdQ91GQSxBhNo/9eAph2ApzKdJWm/GmHWZF2VuA9
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277911478777014610512939955982732498045783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 16:13:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 16:13:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21933804338713234585722887111179589720252240292866976214490394773102604572624788825059233522091308940045857836826179743761283830314088967762362927237817086185771409598150388673669905067706437626812788210683457250823593978864774175403051911963281816292431928970382089909467579175945816429603310570562633016692259103929708307260043600733277552277961841372052673905472361303498038869104574911181070219241834353309754119961316837488032993366864238928103467454839590890766109063550943726443007358143462579679612614344424032761766031733886147421012195145800973054085020275598493738226927169948249926745307526045286747094307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b3d8f9b2c4bad293c95ac9fe3982ba2b5255ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2490 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.autozone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agmortgageinvestmenttrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airindustriesgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaairinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altmorecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analystday.playtika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appfolio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqxpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autozone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluewatervaccines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariloha.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccep.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasstherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corecivic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytosorbents.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidsteainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastradius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftandi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillevax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neoleukin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.zimvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2022.alaskaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.airindustriesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.compasstherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.constellationenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.invivyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kalera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.logicmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nuvve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanpowertechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.onereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.opalfuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.primemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repertoire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rigetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.springbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thecoretecgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viridiantherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invivyd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arrowmarkfinancialcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionomics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluewatervaccines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bwbioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cocacolaep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corecivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cytosorbents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.davidstea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fastradius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ftaiaviation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ftandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hillevax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucyscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nano.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thirdharmonicbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackcreek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicmark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyscientificdiscovery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanolabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapp2022investorday.netapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netappinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.smiledirectclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvve.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanpowertechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opalfuels.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtikainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primemedicine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repertoire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigetticomputing.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiledirectclubnewsroom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundpointacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springbig.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonecastlefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoretecgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdharmonicbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viridiantherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vno.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wglholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmortgageinvestmenttrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackcreekinvestmentcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wglholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimvie.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188f38c520a0000040300473045022022cb17ce556e05c622ab77ac3e9346243653f534a550765e9f15b3b85183e755022100ec3a595ac77bd9fa898523aa60424343e26ff419a3dc3eb1d7b8932fd3846f310076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188f38c521c000004030047304502203d5b273ba926c7f22ee38333ad77b42618c4d8beb9316cd67477a6de7a5d1586022100b372a33dd811ab760deeb81e87639a3833fe6abf1b0fc9cde245afa4b62b878a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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