leapfrog-ssl-48.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:71:42:d8:e6:c0:1a:46:7c:9d:cc:96:59:1b:13:1d:b0 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-48.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:71:42:d8:e6:c0:1a:46:7c:9d:cc:96:59:1b:13:1d:b0
Serial Number (int): 405767131224157411894467183416396005711280
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:fc:bd:8e:34:16:d1:bc:ea:75:98:7d:5d:ad:db:e1:67:b5:fa:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:e8:3a:2b:32:e2:f3:22:21:83:90:00:96:05:cc:f1:35:39:c9:f2
Fingerprint (sha256): 3e:b8:28:75:b1:b1:03:f5:6a:96:1f:3d:54:2b:e3:93:10:57:22:3c:7c:4b:cd:74:f7:5a:75:6d:3c:80:de:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-48.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-48.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

algoma.gcs-web.com
apoginvestorday.gcs-web.com
arenagroup.gcs-web.com
aurabiosciences.gcs-web.com
bionanogenomics.gcs-web.com
brightspringhealth.gcs-web.com
brilliantearth.gcs-web.com
crainternationalinc.gcs-web.com
demedredging.gcs-web.com
effectortherapeutics.gcs-web.com
elitebodysculpture.gcs-web.com
embarktrucks.gcs-web.com
ensemblehp.gcs-web.com
eurocastleinv.gcs-web.com
firstlight.gcs-web.com
fluenceenergy.gcs-web.com
fpcanadainvestorday.gcs-web.com
homesmart.gcs-web.com
howardhughes.gcs-web.com
icims.gcs-web.com
investor.eurocastleinv.com
investor.howardhughes.com
investor.minktherapeutics.com
investor.rbcbearings.com
investor.sarcos.com
investor.sterlingcheck.com
investorday.apog.com
investorday.o-i.com
investorrelations.brightspringhealth.com
investors.brilliantearth.com
investors.deme-group.com
investors.effector.com
investors.elitebodysculpture.com
investors.embarktrucks.com
investors.ensemblehp.com
investors.homesmart.com
investors.icims.com
investors.mimedx.com
investors.redbox.com
investors.renttherunway.com
investors.runwaygrowth.com
investors.sonder.com
investors.sportradar.com
investors.thearenagroup.net
investors.thevitacococompany.com
ir.algoma.com
ir.aurabiosciences.com
ir.bionanogenomics.com
ir.brightspringhealth.com
ir.crai.com
ir.firstlightacquisition.com
ir.fluenceenergy.com
ir.jaspertherapeutics.com
ir.jhdtechnologies.com
ir.navitassemi.com
ir.nfigroup.com
ir.onkosxceltx.com
ir.onwd.com
ir.pyxisoncology.com
ir.sab.bio
ir.sabbiotherapeutics.com
ir.sovosbrands.com
ir.tjh.com
ir.zymeworks.com
jaspertherapeutics.gcs-web.com
jihuiduo.gcs-web.com
latamairlines.gcs-web.com
leapfrog-ssl-48.gcs-web.com
mimedx.gcs-web.com
minktherapeutics.gcs-web.com
navitassemi.gcs-web.com
nfigroup.com
nfigroup.gcs-web.com
oiinvestorday.gcs-web.com
onkosxcel.gcs-web.com
onwd.gcs-web.com
pyxisoncology.gcs-web.com
rbccm.gcs-web.com
redbox.gcs-web.com
renttherunway.gcs-web.com
runwaygrowthfinance.gcs-web.com
sabbiotherapeutics.gcs-web.com
sarcos.gcs-web.com
scandinaviantobaccogroup.gcs-web.com
sonder.gcs-web.com
sovosbrands.gcs-web.com
sportradar.gcs-web.com
sterlingcheck.gcs-web.com
tjh.gcs-web.com
trcgrunwaygrowthcreditfund.gcs-web.com
vitacoco.gcs-web.com
www.latamairlinesgroup.net
www.nfigroup.com
yumchinainvestorday.gcs-web.com
zymeworks.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-48.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5VNohAPEsWnry67sLzR
AYSG32LBojHmdU2xTzW7I3t6IfKI8Fd7TbMDQq3xb6nyNBYdRUPC8FUsRzmzCr58
41FMGyL01c1PlxmAR2Vcf2QVOJexH1oBigdHKhmtgsQPxdkozsXE9nC6wK/Xradw
I/N33qpPsUj1X/fhSE7uR2rdnKfyirRddchQf8tnED6DcUOxXFD+jcXd5PjEvlBl
JWTty2ZBHYWrSmBKFr71vcaeEW+X853kO3uJ+CYYUM2CxgAjSG8Z7tvZZpx00iO1
E+0MkAwkGxbcd6W2BBP2PhhIPihg+MNDemzca0lU2HKNJTNKnd7ll5tI6vsmANUN
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405767131224157411894467183416396005711280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 23:25:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 23:25:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25195046866868383180672267678322457292187491472186807592120477883160263324516544899281641225694737672333403399906835071130098908329654139842850991173537938332275331322160436785584451564885090070198904261289368600800341292974442209329385203839527926999230082631590145451705117059784411616287218056480048492390451345154741397669438529333950128425224732680379338022270538101329590079242886622161165691116358022676379881662241346966267396939117577856943250996387237470007058030110046006480983389517479102570124585700511431504500269121699570798255252544886018343046019564549461438602501736021371011365765259922809308908833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19fcbd8e3416d1bcea75987d5daddbe167b5fa65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algoma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenagroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionanogenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspringhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brilliantearth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crainternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demedredging.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectortherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitebodysculpture.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embarktrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblehp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurocastleinv.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstlight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluenceenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpcanadainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesmart.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howardhughes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icims.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.eurocastleinv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.howardhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.minktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rbcbearings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sarcos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sterlingcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.apog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.o-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brilliantearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.deme-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.effector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.elitebodysculpture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.embarktrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ensemblehp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.homesmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mimedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.redbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renttherunway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.runwaygrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sportradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thearenagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thevitacococompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aurabiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionanogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.firstlightacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fluenceenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jaspertherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jhdtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navitassemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.onkosxceltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.onwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyxisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sab.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sabbiotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sovosbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zymeworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspertherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jihuiduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamairlines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimedx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minktherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navitassemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onkosxcel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyxisoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbccm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbox.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renttherunway.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwaygrowthfinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarcos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandinaviantobaccogroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonder.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovosbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportradar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingcheck.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trcgrunwaygrowthcreditfund.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitacoco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamairlinesgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumchinainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymeworks.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c46d0b0a6000004030046304402200cf8be7463bff2cc04316bc374f9f0753d2bceb035a727c6742431937e0d9b75022046fe98a6b76497d0161b157b82c84e0db02c932d3d153df80ef8c8a68b4e6a8a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c46d0b1a50000040300463044022066f2446b550123bb0088fcfa9f6013345c85137fb487a347419e04a0e28bd03702207caa62de2cb6b51fdb63b9a5c2a698028ee525f48a0bd14a915bd4ab76b44d1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b95df3a622498ae6fcbb2057214d713a63848055cd9947ff6b1ec488b98cacd8f53d12ec9c33b2b4db7a075621302192a08794b5cfde2a8cdf1937336f3218196c81a61c70ff29bbb0383bd634e52972347d63471211c202334d5cf846b5e315318274bf123530e247d846f10b562418afb89a52aa34e1d8a2fc422fae6195e2f8ad747c69d55a5dfbb02b2557c435e8838878b2971c85a1c0324d999f9bb4f59d1dea68c78ec6d0a58bc0be54bbad617bcaeaafe77ad4f067ba8032a319dc75531bdbb48384f7a94aaeba0c364f433230bc5bc581188f5787b3153b5b0b1a0bfa1f904035b55e28d4b96181c6543926be7bbc0e843aa182ecff933bf0868e98