leapfrog-ssl-43.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1a:26:00:da:0d:92:98:1a:8e:32:ce:cc:79:a0:9c:ce:f7 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-43.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:26:00:da:0d:92:98:1a:8e:32:ce:cc:79:a0:9c:ce:f7
Serial Number (int): 357347000353465841842026396385979888619255
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:14:3f:eb:76:39:80:26:aa:b9:f0:96:ee:63:05:88:d1:f0:30:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:8f:d8:77:db:32:a4:d3:0f:3e:f4:df:4c:95:8f:e0:c6:d6:62:18
Fingerprint (sha256): 25:f3:fb:0a:62:98:82:26:81:0e:dc:9c:54:1e:b0:2a:b8:0e:bf:28:81:ce:0c:bd:5c:d8:d9:c2:20:2d:ae:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-43.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-43.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1stdibs.gcs-web.com
achillestherapeuticsuklimited.gcs-web.com
adusa.gcs-web.com
aterian.gcs-web.com
aveanna.gcs-web.com
avidinvestorday.gcs-web.com
blueprintmedicines.gcs-web.com
calwatergroup.gcs-web.com
caratherapeutics.gcs-web.com
fabletics.gcs-web.com
fusionfuel.gcs-web.com
gritstoneoncology.gcs-web.com
hearcom.gcs-web.com
hydrafacial.gcs-web.com
impelneuropharma.gcs-web.com
inmedpharmaceuticalsinc.gcs-web.com
intercure.gcs-web.com
investor.lifestance.com
investor.pdl.com
investorandanalystday.perkinelmer.com
investorday.avid.com
investorday.veritone.com
investorday.whitemountains.com
investors.1stdibs.com
investors.beautyhealth.com
investors.fabletics.com
investors.hear.com
investors.honest.com
investors.hydrafacial.com
investors.impelnp.com
investors.inmedpharma.com
investors.knowbe4.com
investors.latch.com
investors.lee.net
investors.orphazyme.com
investors.paycor.com
investors.thetoppscompany.com
investors.vaccitech.co.uk
investors.werewolftx.com
investors.zymergen.com
ir.achillestx.com
ir.aterian.io
ir.aveanna.com
ir.blueprintmedicines.com
ir.calwatergroup.com
ir.caratherapeutics.com
ir.fusion-fuel.eu
ir.gritstonebio.com
ir.kiromic.com
ir.lucirahealth.com
ir.priviahealth.com
ir.saniona.com
ir.semlerscientific.com
ir.soulapp.cn
ir.talaristx.com
ir.taskus.com
ir.tscan.com
ir.veratx.com
ir.xenex.com
kiromic.gcs-web.com
knowbe4.gcs-web.com
latch.gcs-web.com
leapfrog-ssl-43.gcs-web.com
lee.gcs-web.com
lifestancehealth.gcs-web.com
lucirahealth.gcs-web.com
mudrickcapital.gcs-web.com
news.saniona.com
orphazyme.gcs-web.com
paycor.gcs-web.com
pdl.gcs-web.com
perkinelmeranalystday.gcs-web.com
priviahealth.gcs-web.com
saniona.gcs-web.com
sanionapr.gcs-web.com
semlerscientific.gcs-web.com
soulapp.gcs-web.com
talaristherapeutics.gcs-web.com
taskus.gcs-web.com
thehonestcompany.gcs-web.com
thetoppscompany.gcs-web.com
tscan.gcs-web.com
vaccitech.gcs-web.com
veratherapeutics.gcs-web.com
veritone.gcs-web.com
voltalia.gcs-web.com
werewolftx.gcs-web.com
whitemountainsinvestorday.gcs-web.com
www.adusasc.com
www.beautyhealth.com
www.intercure.co
www.mudrickcapitalacquisitioncorp.com
www.pdl.com
www.voltalia.com
xenex.gcs-web.com
zymergen.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-43.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f3wNKciqo7+8bRLkLs5
fCAygd7MHMKPU/dmmXLWF7gZtuo/xUrEuMxHKk3MIiQrc2ZsfFsjY5e14THpgoL+
ydvR5uH04b9WItiNyw/loG6cFjuvp9TASN6BBXOlO0LZpxc6olxOayaOhdUAwWoP
w0FLU+P5dfmSHPTrDm7KZxeprIaBcf4caW8sm1qOsbpId0zl9kBULNTBaSLEYxR8
/pMmNsSBxO07ZK7hsDXvcIu4sDnkCCyKt+4jZpIFG+DN8cW3tuPT3MeWLLHQM2Ou
2eYX5DIZAvOOfxCJo65AT42Imih/QfzFj7wO3H/eOrZoB+1lCbcqK1QWfypMfLKr
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357347000353465841842026396385979888619255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-19 08:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-17 08:49:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28023887041989506819382899748794657995322866754545404459706073425707567175439297704895443977967808122419206168036395794972703587881270008683204521841223964120601086382310938083763472899122482496172292376057050068825659920480090646225839752091234002053531899184472260181934335867551646604405110520835487367111551610494945830499187185050235284056609111624828858993082265091898819682744199494131195599529190443415571985826299726685096078452070542711782339289450078039046528519722271799573514945982852531904637828637974875619855732182011412599020004138576013944301166829951141634923419862451454170953560859180210658126661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b143feb76398026aab9f096ee630588d1f0309c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achillestherapeuticsuklimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adusa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aterian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveanna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintmedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwatergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabletics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionfuel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gritstoneoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrafacial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelneuropharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmedpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lifestance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorandanalystday.perkinelmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.avid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.veritone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.whitemountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fabletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.honest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrafacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.inmedpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.knowbe4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.latch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orphazyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thetoppscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaccitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.werewolftx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.zymergen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.achillestx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aterian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aveanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.blueprintmedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fusion-fuel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gritstonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiromic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lucirahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.semlerscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.soulapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.talaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.taskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiromic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowbe4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestancehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucirahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudrickcapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orphazyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkinelmeranalystday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priviahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saniona.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanionapr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semlerscientific.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talaristherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehonestcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetoppscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccitech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voltalia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werewolftx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemountainsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adusasc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mudrickcapitalacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymergen.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c97f51d3600000403004730450220396f1d10d0ff030ad62cf5727e9f5940eed9faf2c7812441b38abf7ea6fc881002210093c248f386dcaeec2aab12000bf0b419ab7d7c1b7eab75c3fc46e0e3f12bb3ba0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017c97f51d6b0000040300473045022050be85680bf4819e95aabef72797fdb85eadbd0facbe2e3c14fd77e55289ed5702210098b20b1fa02d1404567fb6daa9da57c09944a209e3a0c0194de6a822ed421c7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015289405b9fb534ee3890be39903894220b3d5129697249fb25341471e1ca7115668162bb99e33485bbfcf4d76a2c7f89876848a6275c3876cc428dc9afc0c170a5edb5ac24b0b76d654fac2f3af7a7cbf08696d4052cd8fe7f361fa2023724c6ee7b70a7165fd461fb6c82fda2bf7ce04be041f2217d33f0b9996d42e5774151cb3ea283259381af7be9bc1eb08b94d7fb1d74fa2472fd3a7f8943447d6b9a353c3effd4d817b064d3cee72ad0b46ba9861e640551d1a0d3ef1cd0fc29195abecb4bce6a957a510191982db3cbfefc7aec9971cf507110ef170de6a44eb5b6b11bb7d67ff99e2aefae274852521e2e7c6d7ef8c24c7162a87f65cb21e4d57c0