leapfrog-ssl-51.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:83:eb:6d:1f:bf:ce:97:9b:e9:fe:c9:9a:1e:8e:76:a6 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-51.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:83:eb:6d:1f:bf:ce:97:9b:e9:fe:c9:9a:1e:8e:76:a6
Serial Number (int): 271380397706495616271675099092500135966374
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:86:75:44:96:d9:53:15:47:16:f8:5f:e0:40:a5:9e:31:bc:cd:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:2b:57:fb:6c:92:01:3f:18:81:3b:0e:30:c8:63:35:30:ee:36:0c
Fingerprint (sha256): 1e:d1:c5:29:a8:a3:19:ff:b9:4e:4e:da:97:5e:aa:9b:8c:0f:fb:47:74:cb:7a:a8:6f:55:c6:52:05:1d:e0:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-51.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-51.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.autozone.com
agmortgageinvestmenttrust.gcs-web.com
airindustriesgroup.gcs-web.com
alaskaairinvestorday.gcs-web.com
altmorecap.gcs-web.com
analystday.playtika.com
appfolio.gcs-web.com
aqxpharma.gcs-web.com
autozone.gcs-web.com
bionomics.gcs-web.com
bluewatervaccines.gcs-web.com
cariloha.gcs-web.com
ccep.gcs-web.com
compasstherapeutics.gcs-web.com
constellationenergy.gcs-web.com
corecivic.gcs-web.com
cytosorbents.gcs-web.com
davidsteainc.gcs-web.com
fastradius.gcs-web.com
fbn.gcs-web.com
ftandi.gcs-web.com
gevo.gcs-web.com
hillevax.gcs-web.com
investor.neoleukin.com
investor.soundpointacquisition.com
investor.zimvie.com
investorday2022.alaskaair.com
investors.airindustriesgroup.com
investors.compasstherapeutics.com
investors.constellationenergy.com
investors.fbn.com
investors.gevo.com
investors.invivyd.com
investors.kalera.com
investors.logicmark.com
investors.nuvve.com
investors.oceanpowertechnologies.com
investors.onereal.com
investors.opalfuels.com
investors.primemedicine.com
investors.repertoire.com
investors.rigetti.com
investors.springbig.com
investors.viridiantherapeutics.com
invivyd.gcs-web.com
ir.appfolioinc.com
ir.arrowmarkfinancialcorp.com
ir.bionomics.com.au
ir.bluewatervaccines.com
ir.cocacolaep.com
ir.corecivic.com
ir.cytosorbents.com
ir.davidstea.com
ir.fastradius.com
ir.ftaiaviation.com
ir.ftandi.com
ir.hillevax.com
ir.lucyscientific.com
ir.nano.cn
ir.paramount.com
ir.thirdharmonicbio.com
jackcreek.gcs-web.com
joinreal.gcs-web.com
kalera.gcs-web.com
leapfrog-ssl-51.gcs-web.com
logicmark.gcs-web.com
lucyscientificdiscovery.gcs-web.com
nanolabs.gcs-web.com
netapp2022investorday.netapp.com
netappinvestorday.gcs-web.com
newage.gcs-web.com
news.smiledirectclub.com
nuvve.gcs-web.com
oceanpowertechnologies.gcs-web.com
opalfuels.gcs-web.com
perfectcorp.gcs-web.com
playtikainvestorday.gcs-web.com
primemedicine.gcs-web.com
repertoire.gcs-web.com
rigetticomputing.gcs-web.com
smiledirectclubnewsroom.gcs-web.com
soundpointacquisition.gcs-web.com
springbig.gcs-web.com
stonecastlefinancial.gcs-web.com
thirdharmonicbio.gcs-web.com
viacbs.gcs-web.com
viridiantherapeutics.gcs-web.com
wglholdingsinc.gcs-web.com
www.agmit.com
www.agmortgageinvestmenttrust.com
www.jackcreekinvestmentcorp.com
www.soundpointacquisition.com
www.wglholdings.com
zimvie.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-51.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroHQiVQDmz8wbMc5NEmS
qNimOzybfdXNNzn3iySfDzR8IhVB2Mf7BCYDuJUL0wMDoeNuOGegrqE+jiDVNmSh
NB1eTgqGLDx4QET+r8cmp2tg6FiC3gmx6Z8fyLdG5fS4fQ8s9HcX9xjTQOPJ9SDK
7GuMhkndYPZjFzwi6PTcUeiHIGKMsh/WN0Ev706hTBJN0Ap2GbixpueaM3mPOi6r
+hLkvhQ5C9S/qVouvFBwpBZcUBvNYnF1Y7x9JAFMMuJ52ymehDaovVjdhYGpinY1
+S8exQr7XsIdnFQXpkr34GrsKq3eq2YCD1bcOgNWAqadHB6ytzP93LSQFwCku6ta
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271380397706495616271675099092500135966374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 16:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 16:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22029479026949448632373051530732532173743546505131320614404442894951280351990770243015023401005046146295601576366810005867052641134342059133480557164933313085555452018180015522555161175912943335586628220789455431037127362977366012096034408732610560714184103450275798126519605732219130563970561810407569089162348927420889255251181581406100557236369551364904785675879224607130492097511929466894980898136193190496820740739350722695920688959775781406257609540278213964777276578227156291434244121904043102929843973542946309641086232997608197714205318251180121527650952917440764049130290225964882227888627090085966017944223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c86754496d953154716f85fe040a59e31bccd69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.autozone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agmortgageinvestmenttrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airindustriesgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskaairinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altmorecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analystday.playtika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appfolio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqxpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autozone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluewatervaccines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariloha.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccep.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasstherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corecivic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytosorbents.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidsteainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastradius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftandi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gevo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillevax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neoleukin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.zimvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2022.alaskaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.airindustriesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.compasstherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.constellationenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.gevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.invivyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kalera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.logicmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nuvve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanpowertechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.onereal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.opalfuels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.primemedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.repertoire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rigetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.springbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.viridiantherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invivyd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arrowmarkfinancialcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionomics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bluewatervaccines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cocacolaep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corecivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cytosorbents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.davidstea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fastradius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ftaiaviation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ftandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hillevax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucyscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nano.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.paramount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.thirdharmonicbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackcreek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinreal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-51.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicmark.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyscientificdiscovery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanolabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapp2022investorday.netapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netappinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newage.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.smiledirectclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvve.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanpowertechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opalfuels.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playtikainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primemedicine.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repertoire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigetticomputing.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiledirectclubnewsroom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundpointacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springbig.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonecastlefinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdharmonicbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viridiantherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wglholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agmortgageinvestmenttrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackcreekinvestmentcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soundpointacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wglholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimvie.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001869926a15c0000040300463044022064786e8280bca92b7a49441ede37afecab6806233bd96c0c263cd7c2cf7f020402204ffd423896c658cb79e712a1211f4904e06d7e4863ac9cd5014344962c09ea980075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001869926a1710000040300463044022011c7f21d54e046833344fc2803eaa8c4cba2d713ef8118e8dfd0d91290f4bbeb0220456680e5006f613f8ea7a0fc65a9de4b13466ee4f286a5eafa6404890ad024d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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