leapfrog-ssl-34.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1a:1d:81:0c:3a:18:db:48:01:1b:ae:bc:b7:2e:62:57:b0 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-34.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:1d:81:0c:3a:18:db:48:01:1b:ae:bc:b7:2e:62:57:b0
Serial Number (int): 357335702933149741594290041445230521243568
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:67:2c:07:ee:23:d2:4c:c6:d8:fd:55:a7:f0:48:bd:b7:fa:e9:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:13:90:b7:b2:e0:bc:a0:f1:63:24:fc:3d:e4:f1:f2:df:ea:a7:14
Fingerprint (sha256): 2e:3f:51:d1:75:8e:73:32:bb:96:1a:77:fd:26:e4:ca:da:ba:1a:1d:7a:2c:4d:56:c0:45:6a:8a:f0:47:07:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-34.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-34.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.allegro.eu
accolade.gcs-web.com
agenusbio.gcs-web.com
allegro.gcs-web.com
apachecorp.gcs-web.com
avidbio.gcs-web.com
bentleysystems.gcs-web.com
boltbiotherapeutics.gcs-web.com
c4therapeutics.gcs-web.com
capps.gcs-web.com
cerevel.gcs-web.com
cogentbiosciences.gcs-web.com
collectors.gcs-web.com
compasspathways.gcs-web.com
concordmedical.gcs-web.com
corsair.gcs-web.com
echostar.gcs-web.com
elpolloloco.gcs-web.com
fluidigm.gcs-web.com
greendot.gcs-web.com
harmonicinc.gcs-web.com
harmonybiosciences.gcs-web.com
houwire.gcs-web.com
iderapharmaceuticalsinc.gcs-web.com
immunogen.gcs-web.com
investor.agenusbio.com
investor.apachecorp.com
investor.apacorp.com
investor.capps.com
investor.elpolloloco.com
investor.harmonicinc.com
investor.immunogen.com
investor.neworiental.org
investor.stevemadden.com
investor.sumologic.com
investor.textainer.com
investors.bentley.com
investors.boltbio.com
investors.cerevel.com
investors.cogentbio.com
investors.collectors.com
investors.fluidigm.com
investors.jfrog.com
investors.magnachip.com
investors.mastercraft.com
investors.outsetmedical.com
investors.pxd.com
investors.shift.com
investors.verdantearth.tech
ir.accolade.com
ir.avidbio.com
ir.c4therapeutics.com
ir.ccm.cn
ir.compasspathways.com
ir.corsair.com
ir.echostar.com
ir.greendot.com
ir.harmonybiosciences.com
ir.houwire.com
ir.iderapharma.com
ir.pmvpharma.com
ir.qudian.com
ir.tattooedchef.com
ir.vivus.com
ir.xin.com
ir.yield10bio.com
ir.zosanopharma.com
jfrog.gcs-web.com
leapfrog-ssl-34.gcs-web.com
magnachipsemiconductorcorp.gcs-web.com
mcbcholdingsinc.gcs-web.com
neworientaleducationandtechnologygroupinc.gcs-web.com
outsetmedicalinc.gcs-web.com
pioneernaturalresourcescompany.gcs-web.com
pmvpharma.gcs-web.com
qudianinc.gcs-web.com
shareholders.stepstoneglobal.com
shareholders.stepstonegroup.com
shift.gcs-web.com
stepstonegroupinc.gcs-web.com
stevemadden.gcs-web.com
sumologic.gcs-web.com
tattooedchef.gcs-web.com
textainergroupholdingsltd.gcs-web.com
uxinlimited.gcs-web.com
verdantearthtechnologies.gcs-web.com
vivusinc.gcs-web.com
yield10bioscienceinc.gcs-web.com
zosanopharmacorporation.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-34.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVq2jJV/kYGco245tQZ
9rD0UABzJhTUivsLeQDxhJzdZtitQN2iOWBvTXWXXvcQTeZ//BlLucGP/S2KNhVy
E1HOeWcjchaQFBH1xT7txQmYDyZ9AaJ84EpiZueukDHUU+wO863csVYxst9p0dbK
eQxxUTicb57v24585NhN+v9/PJi9c5jH5A7vJCiwcEXjsEd7rkj8Awbefudfx8a7
Xo+phZGq2rUVfpbLZpc+14sNreogU75UkY7OSYGdimD+JsUT6cKLraXDoTJtJ2FM
r50N4bw5WJ/eanxWYXuU/dnuO2QgD9ryfbD8yxxeOmKujNT3euVQH8Mqb5YQEjXW
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357335702933149741594290041445230521243568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 12:06:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 12:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23885380736285148095545048964380521118216679359597659064850743350289032907128201761929736680984947629173708159958858441139175096880856777913618825050786814076304059631299886419919489662466039656519949266145692072502901750088253252601789210012345317304160540208556845495756356024377250952886066731806109867288917144975742488943248266246436693899865338301935854026569539838668624980718250240124185481420418554569018989626873157811972504660840847946976239458128898598976421742351908557235442088775276205050458857273307019579942817969716090334231877923543564217706143792998301769451691872663428051077755578784152395568893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab672c07ee23d24cc6d8fd55a7f048bdb7fae967
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.allegro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accolade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apachecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentleysystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerevel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspathways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echostar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpolloloco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonybiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houwire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iderapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agenusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apachecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.capps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.elpolloloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.harmonicinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.immunogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neworiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stevemadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sumologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bentley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.boltbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cogentbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.collectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluidigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.jfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.magnachip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.verdantearth.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.accolade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.c4therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ccm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.compasspathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corsair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.echostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.harmonybiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.houwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iderapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pmvpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tattooedchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yield10bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zosanopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfrog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnachipsemiconductorcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcbcholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworientaleducationandtechnologygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsetmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneernaturalresourcescompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstoneglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shift.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemadden.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumologic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattooedchef.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinlimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdantearthtechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yield10bioscienceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zosanopharmacorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0db6c3cb781ccb2d7a57126ddb2b57efa67aac70cffd55445a9099d264fdc3e999667a30bbaa4578a982592dc4cd4957aee8a9ea32201605b5ee078168a72790298fbbd2193cfb062a8c34d1871605ef414c7f284f3f1652af2a72bbe46df29df7432121dfe9262cc384f1e4796dc6d1893d9e5b7ee1dd20e974abb26e4717b0e2e50d7714d23192f012486b00dff44457e1602bcab0f37eab1eb501b8f74ce0beee633618dbd2078d961db38d689b237bb36c6eba76cd33c46935542fd1f82664e523294d506424c60f1c16289f7658cc9acaeecf9a30543da84c58db4ef45a311deebc0b5c4a87dd75e3bcb8b1df7eefb6296f408e42970335c69fd06dc17