leapfrog-ssl-39.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:33:8f:7e:76:6d:d9:e3:8f:5e:ea:e8:57:db:ba:46:c3 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-39.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:33:8f:7e:76:6d:d9:e3:8f:5e:ea:e8:57:db:ba:46:c3
Serial Number (int): 304621254085442256503978211461293776979651
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:b2:25:6a:e2:72:27:7c:95:d6:3e:5d:b9:2d:7c:89:0c:1a:b5:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:c5:36:6f:a5:17:6d:54:bc:95:cf:66:1a:7f:f0:fc:bc:93:dc:5c
Fingerprint (sha256): 22:73:ba:e2:ac:ad:86:48:16:0d:77:10:f3:87:41:00:1e:3e:90:69:21:fb:f2:97:1d:9d:01:ff:5b:f5:0d:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-39.gcs-web.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-39.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17education.gcs-web.com
4dmt.gcs-web.com
908devices.gcs-web.com
aarcorp.gcs-web.com
arn.gcs-web.com
authid.gcs-web.com
avisbudgetgroup.gcs-web.com
bellerophon.gcs-web.com
billtrust.gcs-web.com
cbiz.gcs-web.com
comtechtel.gcs-web.com
gamestop.gcs-web.com
hartehanksinc.gcs-web.com
hostessbrands.gcs-web.com
htandelimited.gcs-web.com
humanco.gcs-web.com
inspirato.gcs-web.com
investor.gamestop.com
investor.inspirato.com
investor.piedmontreit.com
investor.scholastic.com
investor.seer.bio
investor.tempursealy.com
investorcentre.htande.com.au
investorday.parsons.com
investors.aarcorp.com
investors.arn.com.au
investors.authid.ai
investors.bellerophon.com
investors.kempharm.com
investors.kinnate.com
investors.kosmosenergy.com
ir.4dmoleculartherapeutics.com
ir.4dmt.com
ir.avisbudgetgroup.com
ir.carlylesecuredlending.com
ir.cbiz.com
ir.cxapp.com
ir.humancospac.com
ir.lear.com
ir.memicmed.com
ir.nationalgeneral.com
ir.patria.com
ir.petco.com
ir.rangeresources.com
ir.ribontx.com
ir.stonecastle-financial.com
ir.tcgbdc.com
ir.ucloudlink.com
ir.upstart.com
ir.vorbio.com
ir.vtvtherapeutics.com
kempharm.gcs-web.com
kinnate.gcs-web.com
kinstechnology.gcs-web.com
kosmosenergyllc.gcs-web.com
leapfrog-ssl-39.gcs-web.com
lear.gcs-web.com
mammothenergy.gcs-web.com
memicmed.gcs-web.com
nationalgeneral.gcs-web.com
news.gamestop.com
parsonsinvestorday.gcs-web.com
patria.gcs-web.com
petco.gcs-web.com
phiopharma.gcs-web.com
piedmontofficerealty.gcs-web.com
rangeresources.gcs-web.com
revivapharma.gcs-web.com
ribontx.gcs-web.com
scholasticcorporation.gcs-web.com
seerinc.gcs-web.com
silverbacktx.gcs-web.com
stbancorp.gcs-web.com
tcgbdc.gcs-web.com
tempursealyinternationalinc.gcs-web.com
thesimplygoodfoodscompany.gcs-web.com
ucloudlink.gcs-web.com
upstartnetworkinc.gcs-web.com
vorbio.gcs-web.com
vtvtherapeuticsinc.gcs-web.com
www.chemed.com
www.kins-tech.com
www.thesimplygoodfoodscompany.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-39.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymwXjsFILEbY4miKJZeQ
aYCojIAASyiFk0OyAAzmCgHVOxgw1vhJaLYuCSrvs10JLg9aP7zGqquJbOvLaRTm
eqR3evUdz36kbLaJo6UjEWwHYygEuF1AWKC6/sSb/edepAsx0YbkDNRYQ25T0UbK
VIwcqAeqIKYDkgTHAEb58kB9GkMFMjs5onb81v+VJxoLMPMFzlv3EjkKtfWMwsWt
ObkdQgVFIAw95wZWGsu4390fj6wjDnYPtClCXeQDZtjzlyHj8K7Rcx668lf3CsWh
4NK1Pe9Q2iUKfCL9qyXgqRbB3afKBlv8abOF6MIgyGapshrpnIHFmo+x6AXfaywE
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304621254085442256503978211461293776979651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 22:58:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 22:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25553439765799995249928304737375548779919576264592745906908274135247081410600173099614866795290513302782903190377382864536906448806745057089706164421925533326765851226039182718817161083731473274165333612150575194381003008806297223781270370082034122086923284898846870506585011496146924935816538303279147244312918053634886724546599946786578850604608296632516939934168701366672974124299359230989203686778183022361176822916314303817134755819132878190684957659839508349436025104073134287920128307354262424683062582362657718723654752714061170733415054786299452887331280529060386971311758644521603365072296986383383159112901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bb2256ae272277c95d63e5db92d7c890c1ab511
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1979 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17education.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dmt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '908devices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authid.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisbudgetgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellerophon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtechtel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartehanksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostessbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htandelimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirato.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inspirato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.piedmontreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seer.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tempursealy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorcentre.htande.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.arn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.authid.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bellerophon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kempharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kinnate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kosmosenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmoleculartherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avisbudgetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.carlylesecuredlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cxapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.humancospac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.memicmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.patria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.petco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rangeresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ribontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stonecastle-financial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcgbdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ucloudlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.upstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vtvtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinnate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinstechnology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmosenergyllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammothenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memicmed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsonsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontofficerealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangeresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revivapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribontx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasticcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverbacktx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbancorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcgbdc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempursealyinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesimplygoodfoodscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucloudlink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstartnetworkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtvtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kins-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesimplygoodfoodscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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