leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:db:f0:3a:56:fc:70:5d:5e:1a:34:4f:62:47:b0:1f:be:9d was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:f0:3a:56:fc:70:5d:5e:1a:34:4f:62:47:b0:1f:be:9d
Serial Number (int): 423290299719220182977699323917325641432733
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:47:fd:69:b6:cb:2c:a9:84:07:25:c7:f8:00:d8:6e:81:2a:18:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:6d:41:f0:15:ba:cd:d0:7c:75:d2:6c:c0:01:57:89:ba:a5:bc:c0
Fingerprint (sha256): 28:6a:d2:c9:1f:fc:12:eb:7a:d2:33:cf:6e:4e:27:5c:5d:4e:0f:8e:2e:dd:60:be:d8:45:8c:b6:04:c4:22:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adamispharmaceuticals.gcs-web.com
aerovatetx.gcs-web.com
americanassetstrust.gcs-web.com
atour.gcs-web.com
brightspire.gcs-web.com
cavotecsa.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
dallasnewscorp.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
erasca.gcs-web.com
ghres.gcs-web.com
hcwbiologics.gcs-web.com
healthcareroyalty.gcs-web.com
highpeakenergy.gcs-web.com
intapp.gcs-web.com
integralads.gcs-web.com
intrepidpotashinc.gcs-web.com
investor.dallasnewscorp.com
investor.dallasnewscorporation.com
investor.ghres.com
investor.landmarkmlp.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.erasca.com
investors.hcwbiologics.com
investors.intapp.com
investors.integralads.com
investors.legalzoom.com
investors.molecularpartners.com
investors.originmaterials.com
investors.prokidney.com
investors.pwpartners.com
investors.rover.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.52tt.com
ir.aerovatetx.com
ir.americanassetstrust.com
ir.brightspire.com
ir.cavotec.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.highpeakenergy.com
ir.lyell.com
ir.many-core.com
ir.monterosatx.com
ir.northann.com
ir.omegatherapeutics.com
ir.schwazze.com
ir.tempesttx.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
landmarkinfrastructurepartnerslp.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
molecularpartners.gcs-web.com
monterosatx.gcs-web.com
northann.gcs-web.com
omegatherapeutics.gcs-web.com
originmaterials.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
press.vimeo.com
prokidney.gcs-web.com
quwanholdinglimited.gcs-web.com
rover.gcs-web.com
scholarrockinvestorday.gcs-web.com
schwazze.gcs-web.com
secondsight.gcs-web.com
silverspikecap.gcs-web.com
ssic.silverspikecap.com
tempesttx.gcs-web.com
theratech.gcs-web.com
toromont.gcs-web.com
uscentury.gcs-web.com
vimeopr.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xcelbrands.gcs-web.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINcDCCDFigAwIBAgISBNvwOlb8cF1eGjRPYkewH76dMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDgxNTEwNDlaFw0yNDAyMDYxNTEwNDhaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC00NS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMOBKvY3TzwvL9K6YfBAA2cDZzcji2+SjYXdc9OeOYtSaO4
Z/gu2M/bYCEN9KNlBsxtLeG0XUHAyBMdlwxB+lSKpat7WdOMPjg6y5jpEfoi0K1U
deYt4uRutwR/sSr/qLLEo9N9lfo7DqErIZFzjJxuOrjXazbzxGQ8i53yEG2349Pd
lHUbZUt/DD/IJM8nFx6uVqH795YR3GJ0b3Ryy+mXCTOgVNH4gAHjs5HQy3rLYK38
61+KZJtyEMvs2y5pGywp5GkKoq2pFoVyfeIr7XUdbkdDFS+AXv7itj358jJHFyd5
+triH8qCdMVO74+d+MV6aWX76plsgK7Q9FM+/80CAwEAAaOCCoowggqGMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUEUf9abbLLKmEByXH+ADYboEqGC0wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggiRBgNVHREEggiIMIIIhIIhYWRhbWlzcGhhcm1hY2V1
dGljYWxzLmdjcy13ZWIuY29tghZhZXJvdmF0ZXR4Lmdjcy13ZWIuY29tgh9hbWVy
aWNhbmFzc2V0c3RydXN0Lmdjcy13ZWIuY29tghFhdG91ci5nY3Mtd2ViLmNvbYIX
YnJpZ2h0c3BpcmUuZ2NzLXdlYi5jb22CFWNhdm90ZWNzYS5nY3Mtd2ViLmNvbYIV
Y2VudHVyeXR4Lmdjcy13ZWIuY29tghtjbG92ZXJiaW9waGFybWEuZ2NzLXdlYi5j
b22CFWNvbmZsdWVudC5nY3Mtd2ViLmNvbYIaZGFsbGFzbmV3c2NvcnAuZ2NzLXdl
Yi5jb22CE2VsaWVtdHguZ2NzLXdlYi5jb22CEmVub3ZpeC5nY3Mtd2ViLmNvbYIS
ZXJhc2NhLmdjcy13ZWIuY29tghFnaHJlcy5nY3Mtd2ViLmNvbYIYaGN3YmlvbG9n
aWNzLmdjcy13ZWIuY29tgh1oZWFsdGhjYXJlcm95YWx0eS5nY3Mtd2ViLmNvbYIa
aGlnaHBlYWtlbmVyZ3kuZ2NzLXdlYi5jb22CEmludGFwcC5nY3Mtd2ViLmNvbYIX
aW50ZWdyYWxhZHMuZ2NzLXdlYi5jb22CHWludHJlcGlkcG90YXNoaW5jLmdjcy13
ZWIuY29tghtpbnZlc3Rvci5kYWxsYXNuZXdzY29ycC5jb22CImludmVzdG9yLmRh
bGxhc25ld3Njb3Jwb3JhdGlvbi5jb22CEmludmVzdG9yLmdocmVzLmNvbYIYaW52
ZXN0b3IubGFuZG1hcmttbHAuY29tghtpbnZlc3RvcmRheS5zY2hvbGFycm9jay5j
b22CF2ludmVzdG9ycy5jZW50dXJ5dHguY29tghZpbnZlc3RvcnMuY29uZmx1ZW50
LmlvghRpbnZlc3RvcnMuZXJhc2NhLmNvbYIaaW52ZXN0b3JzLmhjd2Jpb2xvZ2lj
cy5jb22CFGludmVzdG9ycy5pbnRhcHAuY29tghlpbnZlc3RvcnMuaW50ZWdyYWxh
ZHMuY29tghdpbnZlc3RvcnMubGVnYWx6b29tLmNvbYIfaW52ZXN0b3JzLm1vbGVj
dWxhcnBhcnRuZXJzLmNvbYIdaW52ZXN0b3JzLm9yaWdpbm1hdGVyaWFscy5jb22C
F2ludmVzdG9ycy5wcm9raWRuZXkuY29tghhpbnZlc3RvcnMucHdwYXJ0bmVycy5j
b22CE2ludmVzdG9ycy5yb3Zlci5jb22CF2ludmVzdG9ycy51c2NlbnR1cnkuY29t
ghtpbnZlc3RvcnMudXNjZW50dXJ5YmFuay5jb22CFWludmVzdG9ycy54b21ldHJ5
LmNvbYILaXIuNTJ0dC5jb22CEWlyLmFlcm92YXRldHguY29tghppci5hbWVyaWNh
bmFzc2V0c3RydXN0LmNvbYISaXIuYnJpZ2h0c3BpcmUuY29tgg5pci5jYXZvdGVj
LmNvbYIWaXIuY2xvdmVyYmlvcGhhcm1hLmNvbYIOaXIuZWxpZW10eC5jb22CDWly
LmVub3ZpeC5jb22CGGlyLmhlYWx0aGNhcmVyb3lhbHR5LmNvbYIVaXIuaGlnaHBl
YWtlbmVyZ3kuY29tggxpci5seWVsbC5jb22CEGlyLm1hbnktY29yZS5jb22CEmly
Lm1vbnRlcm9zYXR4LmNvbYIPaXIubm9ydGhhbm4uY29tghhpci5vbWVnYXRoZXJh
cGV1dGljcy5jb22CD2lyLnNjaHdhenplLmNvbYIQaXIudGVtcGVzdHR4LmNvbYIP
aXIud2VlZG1hcHMuY29tggxpci55YWR1by5jb22CDWlyLnpoaXBpbi5jb22CE2th
bnpodW4uZ2NzLXdlYi5jb22CLGxhbmRtYXJraW5mcmFzdHJ1Y3R1cmVwYXJ0bmVy
c2xwLmdjcy13ZWIuY29tghtsZWFwZnJvZy1zc2wtNDUuZ2NzLXdlYi5jb22CFWxl
Z2Fsem9vbS5nY3Mtd2ViLmNvbYIdbHllbGxpbW11bm9waGFybWEuZ2NzLXdlYi5j
b22CFG1hbnljb3JlLmdjcy13ZWIuY29tgh1tb2xlY3VsYXJwYXJ0bmVycy5nY3Mt
d2ViLmNvbYIXbW9udGVyb3NhdHguZ2NzLXdlYi5jb22CFG5vcnRoYW5uLmdjcy13
ZWIuY29tgh1vbWVnYXRoZXJhcGV1dGljcy5nY3Mtd2ViLmNvbYIbb3JpZ2lubWF0
ZXJpYWxzLmdjcy13ZWIuY29tgiVwZXJlbGxhd2VpbmJlcmdwYXJ0bmVyc2xwLmdj
cy13ZWIuY29tgg9wcmVzcy52aW1lby5jb22CFXByb2tpZG5leS5nY3Mtd2ViLmNv
bYIfcXV3YW5ob2xkaW5nbGltaXRlZC5nY3Mtd2ViLmNvbYIRcm92ZXIuZ2NzLXdl
Yi5jb22CInNjaG9sYXJyb2NraW52ZXN0b3JkYXkuZ2NzLXdlYi5jb22CFHNjaHdh
enplLmdjcy13ZWIuY29tghdzZWNvbmRzaWdodC5nY3Mtd2ViLmNvbYIac2lsdmVy
c3Bpa2VjYXAuZ2NzLXdlYi5jb22CF3NzaWMuc2lsdmVyc3Bpa2VjYXAuY29tghV0
ZW1wZXN0dHguZ2NzLXdlYi5jb22CFXRoZXJhdGVjaC5nY3Mtd2ViLmNvbYIUdG9y
b21vbnQuZ2NzLXdlYi5jb22CFXVzY2VudHVyeS5nY3Mtd2ViLmNvbYITdmltZW9w
ci5nY3Mtd2ViLmNvbYIUd2VlZG1hcHMuZ2NzLXdlYi5jb22CEXd3dy50aGVyYXRl
Y2guY29tghZ4Y2VsYnJhbmRzLmdjcy13ZWIuY29tghN4b21ldHJ5Lmdjcy13ZWIu
Y29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLr7NfngAABAMA
SDBGAiEA86NTPSdgII5yzUvJ7RqoUwe5knBxNoqzL0optfNXetICIQDIwBOSV/iw
GibfjelgGAzgRro8mUkOor7xd+pygHefKAB1AHb/iD8KtvuVUcJhzPWHujS0pM27
KdxoQgqf5mdMWjp0AAABi6+zX9oAAAQDAEYwRAIgffxUU9/Ua8e6BtsAzb+wqMw+
xIV1yRg0Da4krBHF98UCIE2xwGW1SOfVHXHGsYrtj4UOANUaDCZjBHeF9zl69Bft
MA0GCSqGSIb3DQEBCwUAA4IBAQAouXbVqayXO2XaqBkXKS2U8IwlFILIJZKqoSHU
QVZHT1thA0Gz1LgdN1j4YHgEc5OU15CLO6rB8p0NP5K1HHa6zh2ATQeiTeoA1K5a
KdLUWCAG2IkrsnBi7hKpAujdKJzKtVp0H/XnStxcvZcUVF9W9BuVjDr4uIh/m/Ew
hhLnBv7jmDslLEMB3Qy2uP0zyQidgPqCD1br5tEmDO2chAkPv0xA55KsbKQLdBcT
38eqnhi35kUL0dBQ5bOvQjT1sqbIz/Wj6/sWudVd5ASxYLoL8BWIaw5JC7NWFHUz
fzkoWdQjbW0JgaB1PZ7/su2RU0j1cWkuvm+HO8YS7MZAJ7i+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow4Eq9jdPPC8v0rph8EA
DZwNnNyOLb5KNhd1z0545i1Jo7hn+C7Yz9tgIQ30o2UGzG0t4bRdQcDIEx2XDEH6
VIqlq3tZ04w+ODrLmOkR+iLQrVR15i3i5G63BH+xKv+ossSj032V+jsOoSshkXOM
nG46uNdrNvPEZDyLnfIQbbfj092UdRtlS38MP8gkzycXHq5Wofv3lhHcYnRvdHLL
6ZcJM6BU0fiAAeOzkdDLestgrfzrX4pkm3IQy+zbLmkbLCnkaQqirakWhXJ94ivt
dR1uR0MVL4Be/uK2PfnyMkcXJ3n62uIfyoJ0xU7vj534xXppZfvqmWyArtD0Uz7/
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423290299719220182977699323917325641432733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 15:10:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 15:10:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20583756364789734109152861231963719224872300082920585027015385540651737429928988654320802003255044584413369798687810643462353450432253808241078328850674409549747979695540022446510770090076585047482212976233323313503354956133027585569130374382121699719790309948376246192768281410295084376837835085742425750719522542931372584097548559077306136959625446634352388275899329211807552128135069159254025677080024268911146628612195273621153115418210895915263518308369040058272384227057131404335646162220389506118524507268789497167248773875522604644054546715837461231270472874284259590387670738978197938880848668209507062448077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1147fd69b6cb2ca9840725c7f800d86e812a182d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamispharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovatetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanassetstrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavotecsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnewscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwbiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpeakenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ghres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.landmarkmlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.erasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hcwbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.integralads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molecularpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.originmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.prokidney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.52tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerovatetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.americanassetstrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cavotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.highpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monterosatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.northann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.schwazze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tempesttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landmarkinfrastructurepartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecularpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterosatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northann.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originmaterials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prokidney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rover.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwazze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspikecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssic.silverspikecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempesttx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toromont.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeopr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcelbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bafb35f9e0000040300483046022100f3a3533d2760208e72cd4bc9ed1aa85307b9927071368ab32f4a29b5f3577ad2022100c8c0139257f8b01a26df8de960180ce046ba3c99490ea2bef177ea7280779f2800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bafb35fda000004030046304402207dfc5453dfd46bc7ba06db00cdbfb0a8cc3ec48575c918340dae24ac11c5f7c502204db1c065b548e7d51d71c6b18aed8f850e00d51a0c2663047785f7397af417ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028b976d5a9ac973b65daa81917292d94f08c251482c82592aaa121d44156474f5b610341b3d4b81d3758f8607804739394d7908b3baac1f29d0d3f92b51c76bace1d804d07a24dea00d4ae5a29d2d4582006d8892bb27062ee12a902e8dd289ccab55a741ff5e74adc5cbd9714545f56f41b958c3af8b8887f9bf1308612e706fee3983b252c4301dd0cb6b8fd33c9089d80fa820f56ebe6d1260ced9c84090fbf4c40e792ac6ca40b741713dfc7aa9e18b7e6450bd1d050e5b3af4234f5b2a6c8cff5a3ebfb16b9d55de404b160ba0bf015886b0e490bb3561475337f392859d4236d6d0981a0753d9effb2ed915348f571692ebe6f873bc612ecc64027b8be