leapfrog-ssl-33.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:05:71:97:85:b1:75:82:b7:c7:d7:29:75:5f:e1:35:05:ab was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-33.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:71:97:85:b1:75:82:b7:c7:d7:29:75:5f:e1:35:05:ab
Serial Number (int): 350301545073615242981504583251982227408299
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:91:e9:d2:3f:d3:96:3f:89:e8:c2:ca:3c:66:b2:21:fe:87:4d:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:cd:cf:6d:f3:f8:1b:8a:a7:27:3c:23:91:99:23:fb:58:62:18:ef
Fingerprint (sha256): 26:30:a7:98:cb:d2:2f:53:4c:3e:67:0d:66:06:5a:a9:9e:50:e5:61:ec:c6:a1:be:20:f4:47:cf:74:db:a7:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-33.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-33.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahbelocorporation.gcs-web.com
allovir.gcs-web.com
biohaven.gcs-web.com
bitautoholdingslimited.gcs-web.com
carrols.gcs-web.com
catalystbiosciencesinc.gcs-web.com
checkmatepharma.gcs-web.com
churchilldownsincorporated.gcs-web.com
colonycapital.gcs-web.com
constellationpharmaceuticals.gcs-web.com
consumerportfolioservicesinc.gcs-web.com
crinetics.gcs-web.com
decibeltherapeutics.gcs-web.com
dynetx.gcs-web.com
fennecpharmaceuticalsinc.gcs-web.com
firsthawaiianinc.gcs-web.com
flir.gcs-web.com
healthstreaminc.gcs-web.com
ibexglobal.gcs-web.com
inozymepharma.gcs-web.com
investor.ahbelo.com
investor.carrols.com
investor.pddholdings.com
investor.pinduoduo.com
investor.streamlinehealth.net
investors.dyne-tx.com
investors.fennecpharma.com
investors.flir.com
investors.ibex.co
investors.inozyme.com
investors.invivotherapeutics.com
investors.marchex.com
investors.merrimack.com
investors.merrimackpharma.com
investors.nanox.vision
investors.predictive-oncology.com
investors.skylinemedical.com
investors.soleno.life
investors.solidpowerbattery.com
investors.surfaceoncology.com
investors.tcr2.com
invivotherapeutics.gcs-web.com
ir.allovir.com
ir.biohaven.com
ir.catalystbiosciences.com
ir.checkmatepharma.com
ir.churchilldownsincorporated.com
ir.clny.com
ir.consumerportfolio.com
ir.crinetics.com
ir.decibeltx.com
ir.fhb.com
ir.healthstream.com
ir.lixiang.com
ir.npcinternational.com
ir.nurixtx.com
ir.quanterix.com
ir.solidpowerbattery.com
ir.tejonranch.com
ir.transenterix.com
ir.twindisc.com
ir.vertexinc.com
kcapfinancial.gcs-web.com
leapfrog-ssl-33.gcs-web.com
liauto.gcs-web.com
luminartech.gcs-web.com
marchex.gcs-web.com
medtronic.gcs-web.com
merrimack.gcs-web.com
nano-ximaging.gcs-web.com
newsroom.medtronic.com
npcinternationalinc.gcs-web.com
nurixtx.gcs-web.com
oasismidstreampartners.gcs-web.com
oilstatesintl.gcs-web.com
pinduoduo.gcs-web.com
quanterixcorporation.gcs-web.com
skylinemedicalinc.gcs-web.com
snowflake.gcs-web.com
soleno.gcs-web.com
solidpowerbattery.gcs-web.com
streamlinehealth.gcs-web.com
surfaceoncology.gcs-web.com
tcr2.gcs-web.com
tejonranch.gcs-web.com
transenterixinc.gcs-web.com
twindisc.gcs-web.com
universalcorp.gcs-web.com
vastaedu.gcs-web.com
vertexinc.gcs-web.com
www.ir.oilstatesintl.com
www.portmanridge.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-33.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wIG8TnzXhCsd3O3JasJ
a+X1Zkb3q6lzQw0q5DI8D0adn3NfWi+0K6gHRX7aeLegVCdN05cw8Io4XTwirbMT
4T2PYWiXhdtYLTdDG4UiQ2TeYaaz6C5Cx1dcLSe2OoXhF7D0QlL7GCQsRnMtkRyZ
qOdQWUYj8F4JtueyY1kMJEAhSN8jGUSfl4q45ODvjcyjTw1VPGCCy/iBT4EmbcBv
KL4eQHsn8Ylr03lGA13Zz8pdWkMcFDd5W4t3d8lMAtazVpOprsfj/Y3v8oPBUpbD
Fdmk5kvUzz8m2bGKfUd3reQWLu1GV1pLxgF61DhNCva3BCw5bHqmANIPpOuFVQiY
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350301545073615242981504583251982227408299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 21:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 21:46:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29162048056460212874767884090319549224968165444656765534506762540871461677933441591572729721093589328628648471925322280160779176238172927866722290548639281091007749626157621310949045042694553555258180390896870776503898009752059269680062161330372901844873130612802337309651330301154345163725190619359352560121620958977170031588323546689881161569745690225509274462344876903833873084077319575719972339554385849161086528002897864365983851913745010458871384252503264842690660497838867690325119436512686713962805687506104826882175131626320454561223734820124775274882817928953438679554363714831893004700392849220152576219367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a991e9d23fd3963f89e8c2ca3c66b221fe874dc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbelocorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allovir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biohaven.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitautoholdingslimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrols.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalystbiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmatepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchilldownsincorporated.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonycapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constellationpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerportfolioservicesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crinetics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decibeltherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fennecpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthawaiianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flir.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthstreaminc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibexglobal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inozymepharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ahbelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.carrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pddholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pinduoduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.streamlinehealth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dyne-tx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fennecpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.flir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ibex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.inozyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.invivotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marchex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.merrimackpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nanox.vision'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.predictive-oncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.skylinemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.soleno.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.solidpowerbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surfaceoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tcr2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invivotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allovir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.biohaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.catalystbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.checkmatepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.churchilldownsincorporated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.clny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.consumerportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crinetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.decibeltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lixiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.npcinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nurixtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.quanterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.solidpowerbattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tejonranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.transenterix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.twindisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vertexinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcapfinancial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-33.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liauto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminartech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medtronic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merrimack.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nano-ximaging.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurixtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasismidstreampartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilstatesintl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinduoduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanterixcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylinemedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowflake.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soleno.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidpowerbattery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamlinehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfaceoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcr2.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tejonranch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenterixinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twindisc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastaedu.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertexinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.oilstatesintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portmanridge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189ae2225740000040300473045022060fd002826db71200a5956b3164ad7d9a64fac26bb4af892e5a2ab8012136de8022100863b3c7b2d71b4cd6b5bf26f98285b50d197800d8c5c00408d0073d06c6461b2007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189ae2225aa0000040300473045022100e0e5de20adc5f4d9c0f01ee3f45ca99044ff3ac97b6a3a183619c47da37731b80220414346d7385044dda3b84d67119ce71049843d1d68873260911d817ffeb9b255
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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