leapfrog-ssl-39.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:19:fb:a6:26:a5:01:25:dc:2f:77:08:5c:6b:59:6a:5f:a4 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-39.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:19:fb:a6:26:a5:01:25:dc:2f:77:08:5c:6b:59:6a:5f:a4
Serial Number (int): 270178415900329299200619694637084452741028
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:00:de:49:71:25:b4:56:bd:5d:71:0e:9f:a8:de:26:96:d0:41:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:0e:07:40:14:38:4d:17:b0:99:1d:97:78:76:f5:40:a6:c9:f1:84
Fingerprint (sha256): 22:cd:ca:d6:5d:5d:aa:4a:50:92:11:df:b0:9b:99:ff:96:24:8c:14:6b:89:31:64:7b:f9:35:a7:ab:71:11:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-39.gcs-web.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-39.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17education.gcs-web.com
4dmt.gcs-web.com
908devices.gcs-web.com
aarcorp.gcs-web.com
arn.gcs-web.com
authid.gcs-web.com
avisbudgetgroup.gcs-web.com
bellerophon.gcs-web.com
billtrust.gcs-web.com
cbiz.gcs-web.com
comtechtel.gcs-web.com
gamestop.gcs-web.com
hartehanksinc.gcs-web.com
hostessbrands.gcs-web.com
htandelimited.gcs-web.com
humanco.gcs-web.com
inspirato.gcs-web.com
investor.gamestop.com
investor.inspirato.com
investor.piedmontreit.com
investor.scholastic.com
investor.seer.bio
investor.tempursealy.com
investorcentre.htande.com.au
investorday.parsons.com
investors.aarcorp.com
investors.arn.com.au
investors.authid.ai
investors.bellerophon.com
investors.kempharm.com
investors.kinnate.com
investors.kosmosenergy.com
ir.4dmoleculartherapeutics.com
ir.4dmt.com
ir.avisbudgetgroup.com
ir.carlylesecuredlending.com
ir.cbiz.com
ir.cxapp.com
ir.humancospac.com
ir.lear.com
ir.memicmed.com
ir.nationalgeneral.com
ir.patria.com
ir.petco.com
ir.rangeresources.com
ir.ribontx.com
ir.stonecastle-financial.com
ir.tcgbdc.com
ir.ucloudlink.com
ir.upstart.com
ir.vorbio.com
ir.vtvtherapeutics.com
kempharm.gcs-web.com
kinnate.gcs-web.com
kinstechnology.gcs-web.com
kosmosenergyllc.gcs-web.com
leapfrog-ssl-39.gcs-web.com
lear.gcs-web.com
mammothenergy.gcs-web.com
memicmed.gcs-web.com
nationalgeneral.gcs-web.com
news.gamestop.com
parsonsinvestorday.gcs-web.com
patria.gcs-web.com
petco.gcs-web.com
phiopharma.gcs-web.com
piedmontofficerealty.gcs-web.com
rangeresources.gcs-web.com
revivapharma.gcs-web.com
ribontx.gcs-web.com
scholasticcorporation.gcs-web.com
seerinc.gcs-web.com
silverbacktx.gcs-web.com
tcgbdc.gcs-web.com
tempursealyinternationalinc.gcs-web.com
thesimplygoodfoodscompany.gcs-web.com
ucloudlink.gcs-web.com
upstartnetworkinc.gcs-web.com
vorbio.gcs-web.com
vtvtherapeuticsinc.gcs-web.com
www.chemed.com
www.kins-tech.com
www.thesimplygoodfoodscompany.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-39.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKKZ+1WKuv3mRIFrtAK
W0jagQWj1mE+WUmNU+C1LzVmGGnYxPG9WHV1dMOP8vj1+tQDQjlcU3QMCtXUn8b+
oKdcgWvDJfWAZMPvQ+r3aLdcnBDbVgue1CG4dopKXMnsuDruPTKrkVp05LKLqKc4
xPY68WzA+xo6G4bPMxCzYiebPRt3nlIBSBZV3pThDqqm+UR8TahcrfTXAaw6hzcT
F+BpVQqQryp6uP1guw6k+C+454wFTHyzfG5IXxqIC+E9Nx7QPkMzxRlbdgXmqp0z
TRSB7TIlwK9iP4eCqFk4quKWzP4yxLlTF60Qr6PQXE9c1c3xbizm3+RQV4a9mEwJ
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270178415900329299200619694637084452741028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 23:33:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:33:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20751674219167423204794535813952643573693647107791759461713624076234890992802888752161199561551375665297727523147086718452481207103790924730747183833966785167430850460739191366134435282235234496304614787982369243714284625841117164196137586572943742592420359375964903328795050741144496290485375834888029254054539731670769143239024814463852661584013860778459320701843686323212615388351967157486478893418726694721261012969600781125951439806655291679361076410785335632651586728042995487908299750189642260264827796954680754292505376598032808213652092151379703366669136302238232426285435246040556171206527505680543576230397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3900de497125b456bd5d710e9fa8de2696d0417b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17education.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dmt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '908devices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authid.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisbudgetgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellerophon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtechtel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartehanksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostessbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htandelimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirato.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inspirato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.piedmontreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seer.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tempursealy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorcentre.htande.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.arn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.authid.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bellerophon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kempharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kinnate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kosmosenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmoleculartherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avisbudgetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.carlylesecuredlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cxapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.humancospac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.memicmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.patria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.petco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rangeresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ribontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stonecastle-financial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcgbdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ucloudlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.upstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vtvtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinnate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinstechnology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmosenergyllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammothenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memicmed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsonsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontofficerealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangeresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revivapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribontx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasticcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverbacktx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcgbdc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempursealyinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesimplygoodfoodscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucloudlink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstartnetworkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtvtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kins-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesimplygoodfoodscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ebb1f879f00000403004630440220781a96a8125112a1da81735a87c5c47ac711f4e40c1ee522d0b69fed75a9f94b022062634c3f1efcaaea82fc032438814dc34c992bd17c0d8834d45734e45f4a2d450076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ebb1f879e0000040300473045022100dbe80fd60f10b4c2295ed268eb2d038b9e45bc3d0eda8aa1ebc488560316423d02201aa554635586ce4ff330425a0d3eae9ba229b7129ab44871873073518eb44580
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00371fa81d56692834a7233cfe83ecfbe61d2d1867822d63b86fbf8e3243ebef87f8d44823847403d0c21e76d1b9ef4a8b13f55ce5c2aa842447a31e9641ddce60b42e41eb76e58c6624f017f7c1cd9b5c2a12d3edf6391ad42fd9460cfad31ad98bf7939818eec56a0137bba326fc0d6c83321f773be7fecd4d0470ea8884e5eca233eee27bb8ccfc719fe5dd8d2400373272177ba1eb9f59c9a3e25abcb2191b3b4fbb24575f156c684f82bba9d0cd5664d844002ee82eb998eb62c5a57432a01ae7a022e3a63fbf1ea7757293d54e52b8d84254e11593a1f97bc9c4f859fbdd4e182c31c8a618ea9b69d28c7f7787564107fa53194bbbc9c39d37b4f736cf63