leapfrog-ssl-49.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dd:61:c7:f9:fc:58:37:df:95:5c:76:55:89:0e:39:62:57 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-49.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:61:c7:f9:fc:58:37:df:95:5c:76:55:89:0e:39:62:57
Serial Number (int): 423781520269547162772758992066918651355735
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:47:f7:8e:7d:ce:6c:de:84:3c:28:25:b5:8b:8c:1a:a9:6d:4a:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:87:4d:88:29:65:bf:1d:07:e6:0b:6f:59:1d:13:79:6c:1e:a7:4b
Fingerprint (sha256): 30:e8:e7:65:f8:2f:b6:2d:c9:00:25:35:98:92:97:b0:7f:39:ee:6e:0b:dc:27:bf:ec:c0:7b:29:dd:40:cd:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-49.gcs-web.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-49.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

21vianetgroupinc.gcs-web.com
2seventybio.gcs-web.com
acceleratesoftwarescquisitioncorp.gcs-web.com
agtc.gcs-web.com
allenapharma.gcs-web.com
amplitude.gcs-web.com
arhaus.gcs-web.com
asminvestorday.gcs-web.com
bawaginvestorday.gcs-web.com
bioatla.gcs-web.com
buzzfeed.gcs-web.com
cingulatetherapeutics.gcs-web.com
cuehealth.gcs-web.com
dicetherapeutics.gcs-web.com
docgo.gcs-web.com
doubledowninteractive.gcs-web.com
firstwatch.gcs-web.com
flexenergy.gcs-web.com
glginsights.gcs-web.com
greenidge.gcs-web.com
heartflow.gcs-web.com
hotelplanner.gcs-web.com
ifit.gcs-web.com
incytecorp.gcs-web.com
innovate.gcs-web.com
investor.incyte.com
investor.mesa-air.com
investorday.asm.com
investorday.bawaggroup.com
investorday.perpetual.com.au
investors.amplitude.com
investors.buzzfeed.com
investors.cuehealth.com
investors.dicetherapeutics.com
investors.firstwatch.com
investors.heartflow.com
investors.ifit.com
investors.isoplexis.com
investors.kennametal.com
investors.lianbio.com
investors.lilium.com
investors.maven.io
investors.metals.co
investors.phillipsedison.com
investors.portillos.com
investors.science37.com
investors.udemy.com
ir.21vianet.com
ir.2seventybio.com
ir.agtc.com
ir.allenapharma.com
ir.arhaus.com
ir.bioatla.com
ir.buzzfeed.com
ir.docgo.com
ir.doubledowninteractive.com
ir.flexenergy.com
ir.glginsights.com
ir.greenidge.com
ir.ifit.com
ir.lilium.com
ir.microvast.com
ir.navios-mlp.com
ir.strongholddigitalmining.com
ir.vnet.com
ir.xiliotx.com
isoplexis.gcs-web.com
kennametal.gcs-web.com
leapfrog-ssl-49.gcs-web.com
lianbio.gcs-web.com
lilium.gcs-web.com
loyaltyventures.gcs-web.com
maven.gcs-web.com
mesaair.gcs-web.com
metals.gcs-web.com
microvast.gcs-web.com
millerknoll.gcs-web.com
naviosmlp.gcs-web.com
newsroom.parexel.com
oceandriveacquisition.gcs-web.com
parexel.gcs-web.com
perpetualinvestorday.gcs-web.com
phillipsedison.gcs-web.com
portillos.gcs-web.com
science37.gcs-web.com
strongholddigitalmining.gcs-web.com
tk.gcs-web.com
udemy.gcs-web.com
www.acceleratesoftwareacqcorp.com
www.bzfd.com
www.cingulate.com
www.innovate-ir.com
www.loyaltyventures.com
www.oceandrivespac.com
www.tkbcriticaltechnologies.com
www.tkbtech.com
xiliotx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-49.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rclc3GoVjoxMlCo+9pV
fa/i+V6TmZxY75PqwuqsQBacpbFV4fpky3+/4oYjc8gmDovmDQrHqqeClx61BvcD
x98w7ADIFBQJPHlusrA3v8eSp1ydXuJ+hXmr0eMTNUdVndZWxnT45v7yYEc5lETX
j85KSQXfbNIlejUbjbkvdB5Ioz+mLFW7fhzNyJXs4eYqopgKTrZpZniCuTjPegxN
T+SWdIh9k9ocN12VPWa4cw48hkPzb6P6D6MIudfk9VMfGb2yDu94fGMcgmWvJQnQ
nEkJhrG/RCN3QSL/SkY3cVt1SA/AGqCw0DS39RNZZjfKRugYaln6AA/nudMdUmhR
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423781520269547162772758992066918651355735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-27 12:50:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 12:50:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29630076165034392776665867632219834724219386593262699498369787046469527437581226488583370926934630328272860941406740629565101463122442117680774808484475408700688830449016688771424203423066906236225402784491111086309758463682700982463664433028961716423128580970437508583571806539830812015166849073581438503715554075876809947248452873883478906231132600206402714675829712292412902188599459385457356126874950136463982229854485991395198136717429551441574519848626027416679551938719178862642461765698267225851148225511548543669515147038955298686976268195645010489012947364174465677629290247410245707216690995833119324000623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c47f78e7dce6cde843c2825b58b8c1aa96d4a62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21vianetgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2seventybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceleratesoftwarescquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplitude.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arhaus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asminvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bawaginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioatla.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cingulatetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docgo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubledowninteractive.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwatch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glginsights.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenidge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartflow.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incytecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mesa-air.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.asm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.bawaggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.perpetual.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amplitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cuehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.firstwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heartflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.isoplexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kennametal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lianbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.metals.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phillipsedison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.portillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.science37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.udemy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.21vianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.2seventybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allenapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bioatla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.docgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doubledowninteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glginsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenidge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.microvast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navios-mlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.strongholddigitalmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xiliotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoplexis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennametal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lianbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyaltyventures.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesaair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microvast.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millerknoll.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviosmlp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceandriveacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parexel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perpetualinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillipsedison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portillos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science37.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongholddigitalmining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udemy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceleratesoftwareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bzfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cingulate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate-ir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyaltyventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceandrivespac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkbcriticaltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tkbtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiliotx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184b95a64880000040300473045022100bf8e554383550c80d8ace156c0e412136782b056466bac8d65290d3b7bafeb0f0220281a013aa8379b38b73eb02cd96f712163646be1fd6973d76f9febe722745ef2007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184b95a65000000040300483046022100cb2ada9f3cbb73eab527cb06e48917cc0c3a7b50d3d8863e7e07074d937ef86c02210081f0cc7c9bae6b731e2627b1a37731aa69978ce4b4144966af7fdf7c80a24170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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