leapfrog-ssl-49.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:9d:51:d8:c8:9b:e3:7a:25:7c:6c:20:bc:e1:19:ba:c7 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-49.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:9d:51:d8:c8:9b:e3:7a:25:7c:6c:20:bc:e1:19:ba:c7
Serial Number (int): 292511666953364265299239842578123401575111
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:6a:b6:c5:d8:c0:ac:d7:c3:ff:4a:4a:0c:8e:b9:e3:3b:e7:73:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:c2:bd:d9:9b:9e:f6:27:d7:0c:c1:ad:df:16:ab:7a:ef:ad:ad:7d
Fingerprint (sha256): 40:15:db:81:b7:b8:68:f6:ab:46:06:2a:e2:28:47:04:6a:cc:59:ad:53:68:34:4a:ff:5e:66:dc:6a:09:79:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-49.gcs-web.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-49.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2seventybio.gcs-web.com
acceleratesoftwarescquisitioncorp.gcs-web.com
agtc.gcs-web.com
allenapharma.gcs-web.com
amplitude.gcs-web.com
arhaus.gcs-web.com
asminvestorday.gcs-web.com
bawaginvestorday.gcs-web.com
bioatla.gcs-web.com
cingulatetherapeutics.gcs-web.com
cuehealth.gcs-web.com
dicetherapeutics.gcs-web.com
doubledowninteractive.gcs-web.com
firstwatch.gcs-web.com
flexenergy.gcs-web.com
greenidge.gcs-web.com
ifit.gcs-web.com
innovate.gcs-web.com
investor.mesa-air.com
investorday.asm.com
investorday.bawaggroup.com
investorday.perpetual.com.au
investors.amplitude.com
investors.cuehealth.com
investors.dicetherapeutics.com
investors.firstwatch.com
investors.ifit.com
investors.isoplexis.com
investors.lilium.com
investors.maven.io
investors.metals.co
investors.phillipsedison.com
investors.portillos.com
investors.science37.com
investors.udemy.com
ir.2seventybio.com
ir.agtc.com
ir.allenapharma.com
ir.arhaus.com
ir.bioatla.com
ir.doubledowninteractive.com
ir.flexenergy.com
ir.greenidge.com
ir.ifit.com
ir.lilium.com
ir.microvast.com
ir.navios-mlp.com
ir.strongholddigitalmining.com
isoplexis.gcs-web.com
leapfrog-ssl-49.gcs-web.com
lilium.gcs-web.com
loyaltyventures.gcs-web.com
maven.gcs-web.com
mesaair.gcs-web.com
metals.gcs-web.com
microvast.gcs-web.com
millerknoll.gcs-web.com
naviosmlp.gcs-web.com
newsroom.parexel.com
oceandriveacquisition.gcs-web.com
parexel.gcs-web.com
perpetualinvestorday.gcs-web.com
phillipsedison.gcs-web.com
portillos.gcs-web.com
science37.gcs-web.com
strongholddigitalmining.gcs-web.com
udemy.gcs-web.com
www.acceleratesoftwareacqcorp.com
www.cingulate.com
www.innovate-ir.com
www.loyaltyventures.com
www.millerknoll.com
www.oceandrivespac.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-49.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LzERLrkRF46v2wlDXpk
YyursK0tF/x7RoV/NpLRORbjJvsNjqv15yX1K6nVC9Fa+cLzPWQ1aYvdYP73A4wd
r0+1C/5ZFg0R8HA8CvADE4GyIBprdumXR62sgXQU3BoIRfwLbGl9kiMqkdg1MPsR
mYlSODzxGrGTHnptFaEw3RZuy2C5rMj36U1Ru+KzFApaEBfE94/98YLsCxB+UFqT
ZoSuJKS93kHxcc9aq9If0BwOs53DCYr5vKN1f4rD3EwZ9n3DdZH+6u05vh2Sj25U
QoQ0QPbnsT5ix0SxFmuspZggg5G4uyGmwftSwCUHBbB4V2jGF1VeoRoTRNgMSEbM
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292511666953364265299239842578123401575111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 18:18:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 18:18:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27360558188788481529244693634407968146637390371768784043369410470171230560042941563006909448655911676496160635555235244339649868315328247255322791919822245222068058735437832235008739135097197038538984554404006337498473773619594452422912918249876502156292921552468805829687779837218927331253014235393147039066708531760474852840049128845966584043212105572034065266552047740254526684391863403914258119814552808962425092250662612525774604467556676121438187442890346350930914285648436555949940401909070695534211433893615308766428855064955333431804795633198344468274261101155213335674461515757560653272441251048569224744003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							316ab6c5d8c0acd7c3ff4a4a0c8eb9e33be773fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1763 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2seventybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceleratesoftwarescquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplitude.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arhaus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asminvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bawaginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioatla.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cingulatetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubledowninteractive.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwatch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenidge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mesa-air.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.asm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.bawaggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.perpetual.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amplitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cuehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.firstwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.isoplexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.metals.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phillipsedison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.portillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.science37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.udemy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.2seventybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.allenapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bioatla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doubledowninteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenidge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.microvast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navios-mlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.strongholddigitalmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoplexis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyaltyventures.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesaair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microvast.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millerknoll.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviosmlp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceandriveacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parexel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perpetualinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillipsedison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portillos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science37.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongholddigitalmining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udemy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceleratesoftwareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cingulate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate-ir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loyaltyventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millerknoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceandrivespac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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