leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:af:6a:8b:16:ce:6b:52:a4:49:99:b9:80:eb:2a:14:ca:4e was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:6a:8b:16:ce:6b:52:a4:49:99:b9:80:eb:2a:14:ca:4e
Serial Number (int): 408140178297588982678223411325633641630286
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:44:8f:87:ce:20:80:05:cd:36:ec:95:3c:d3:b0:ff:21:a9:ab:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:75:32:75:73:5c:28:e1:25:63:19:fd:8f:8e:eb:19:bf:7e:a2:94
Fingerprint (sha256): 3f:5e:ab:e3:35:d8:bf:b9:a7:a2:c8:ea:39:f7:bf:5f:74:ae:7e:ae:17:ef:64:31:55:b2:5a:78:d6:71:4d:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.ctfjewellerygroup.com
2021randdday.zailaboratory.com
adagiotx.gcs-web.com
aerofarms.gcs-web.com
agilethought.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
clarus.gcs-web.com
ctfjewellerygroup.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.securitynational.com
investor.tremorinternational.com
investors.adagiotx.com
investors.aerofarms.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.intuitymedical.com
investors.oceanbiomedical.com
investors.rallybio.com
investors.sabrestrategicacquisitioncorp.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.tremorinternational.com
investors.waitrapp.com
investors.wcgclinical.com
investors.xostrucks.com
ir.agilethought.com
ir.gtec-tech.com
ir.immuneering.com
ir.nalumed.com
ir.neuronetics.com
ir.portagebiotech.com
ir.procept-biorobotics.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
neuroneticsinc.gcs-web.com
oceanbiomedical.gcs-web.com
portagebiotech.gcs-web.com
procept-biorobotics.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
sabrestrategicacquisitioncorp.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
tremorinternationalltd.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
waitr.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com
xostrucks.gcs-web.com
zailabranddday.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk1VAWLbxglUz+Zr23P8
jHk6CwU6OC2ODqDXXJtzHqLhRx7WTnXXa+bEW3ypi5JANFebN4ibAe4NFtm6u53c
MQv41boySBdUb44xC6uzBuzwbi8P3NuYkgidNaRjGUhFzeCUQ5qie4ADABtDZ6/j
69L27mFgwYB842j6/0YrAgSWfUWVJIkLjyR0hQihVY1RmvmoQE22h/K0T97griii
pL5HM2mzaW5QlexJHKaxKoMGTGfza2spwPL/5rcvpKtvVimpHsHQ1N2Z9fN1lZ/u
rJW/jLtx41EDaRry7I++nxqkwZ4XRRq+fkPTleGJzX+xwDkaI1rtwxx0xuC6PI3r
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408140178297588982678223411325633641630286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-10 18:58:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-08 18:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26043224679315403193386958260782887857474781645361757730219053218444802050726946432213016799902905142313513936619037670592244691356296306624037918620545977545917051484291750025465307736240147042871262709185348972861577878410112083719139953415988471908931392186748404665032746814552131926888587131011162237311874284224272481647336249183278906540933045639970812088598127231433594487482169621354431040492245766052962280477739694757158704958511108244975445887029282000146205530034780864940797336281301384720005188096706034877800087036676909563534621415448791144443091356105642930551016501497706478057499291061591565265671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0448f87ce208005cd36ec953cd3b0ff21a9ab8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2023 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.ctfjewellerygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021randdday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilethought.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfjewellerygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabrestrategicacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waitrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xostrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agilethought.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuronetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.procept-biorobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procept-biorobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrestrategicacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremorinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xostrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017b31a52cf1000004030047304502210090ff93de9559ce37da11977eff431741861eac75c76c40cbe631966ff651bc260220104b6bd632a1bd5ee8c3b4b425d92528752fa593f696bb4513f32e87e47ff6950076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017b31a52d5b000004030047304502204dbe9e8a2ceb4e8d0cd94cc4a33f6ba6236efb70d8294bff8236e2a56d4afaf1022100e8bf6f169a2542ced0fae9a398cf7fcede1000e899ead773e326a18594c84ecd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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