leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e7:ba:f5:e8:b1:d7:b5:ae:dd:dd:bc:4f:ea:c5:e2:d8:cf was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:ba:f5:e8:b1:d7:b5:ae:dd:dd:bc:4f:ea:c5:e2:d8:cf
Serial Number (int): 340190597793573032115722072649681116256463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:89:9e:34:20:18:43:82:cf:8b:43:de:ab:8f:3e:02:0c:c3:c4:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:f9:4b:0c:d6:e3:d7:f5:12:77:6b:75:e9:79:34:ba:dd:c3:ad:cd
Fingerprint (sha256): 22:d7:0e:47:28:4b:25:10:ec:42:d2:3e:1a:aa:15:b5:2a:0e:70:c7:67:97:22:46:af:47:62:b8:b8:ee:59:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amphastar.gcs-web.com
atour.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
coupainvestorday.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
healthcareroyalty.gcs-web.com
intapp.gcs-web.com
intrepidpotashinc.gcs-web.com
investorday.coupa.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.intapp.com
investors.intrepidpotash.com
investors.krispykreme.com
investors.legalzoom.com
investors.pwpartners.com
investors.secondsight.com
investors.shelteracq.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.52tt.com
ir.amphastar.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.lyell.com
ir.many-core.com
ir.monday.com
ir.omegatherapeutics.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
krispykreme.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
mondaycom.gcs-web.com
omegatherapeutics.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
quwanholdinglimited.gcs-web.com
scholarrockinvestorday.gcs-web.com
secondsight.gcs-web.com
shelteracq.gcs-web.com
theratech.gcs-web.com
uscentury.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HYAyvx9E8HmpQxJfR/6
bup2FS0lkm/w2xX7tPEtBfPByES+0+RWS4vbYThX+rSZbVwYrHAKIObwuMEALPqa
qgxJNa72Va3Y0E07wTIIOZ5SJwGY6BmrYQ2tzu8FwpLE1+EkyMU6BBSv4yv7vZi6
mS49kv4x9wAV633uW5JE3o4NaS/pT5VO14H55XRuvteFy1rbXqf/DrX0J/MGI8j2
qc/X/7ilXEgX3H0yxc/aSXilMzoSUN9anpOF3m95lDaW8xq8u5V7HPviFfFNbrmf
59DhqW/Torgep8U8LFcPMBOkPsvweEiwGyXn70b22P5W5avsOw/rnHWtDzwSIlh7
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340190597793573032115722072649681116256463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 13:18:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-20 13:18:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28840523028304483318394052911209264048637538969264344648799705132440734970465426875743350323563953112453774798042548918343345159801703018510401843313013914244884673348501826827965389372294301325948801659148927213547016387652305041703552619018603298478292966105396175681762699031869316850251022489225348507412408679387751009165597198388837636214406814921242244966584682773683564934576378216746414721446030097651884996764697532254232725722014274115060149342478262721241672589822544224908625774369561227577448290927635996741389600308447304471304407161809098444901683702252847414644162919433733730177215840630670102133617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f899e3420184382cf8b43deab8f3e020cc3c4fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amphastar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.coupa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intrepidpotash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.krispykreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.secondsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shelteracq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.52tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amphastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krispykreme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondaycom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelteracq.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a34164ae900000403004630440220746a118ff4dcb8539af715510a78250d1a726f2d768e612be9da70f7765b12b202203757ad3c654c70987627665bb7999d3a1d6e1bce14ca3468c850970a2bb9eac7007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a34164abb0000040300463044022049bfa52b5e7fa60315238863c646e476d23b4e4978cbe7efe1ec25f2902b9ed602205e3f5d501d3f9029528d118354113d657c74a749d04dbced584f36b58acd95ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c82b665333fb096c3611e652c63ba7e755b89b956c2b5bf6e7f08b2e601c734845c0e2e97993aaa8efd59ddee21857639d4c9e1e8a11b0daee3be9257151487c28fd59568ad7044e680f2f07f9979d3c65b762df6b1f68428320264352f73a2b4ee366a81f374c9c023f0efd80fdad5d4c5461eb92042c8295aa321762a8886a7488afbc6066442b72a9cb71bc9321093a570c489ff1c3c0d578e4d37e44285f119ad660c767fae6eb80a1d946fb421422fb1cfd5863af7123c9b9416b547a10419b7c640f0835b0380b2db3d3010a3b990e262b939d66bde9321467ec3f67448dfa50dd9861b91d4275cdd9254fc6d0621e4aa4bf8fe21f748fc0644318c7b