leapfrog-ssl-49.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:43:00:8d:cf:e5:3e:48:96:6f:43:f7:48:30:d0:60:ac:e9 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-49.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:00:8d:cf:e5:3e:48:96:6f:43:f7:48:30:d0:60:ac:e9
Serial Number (int): 371248798641222230044575024706728457448681
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:b5:37:b2:02:d4:88:cc:12:2a:d8:d4:15:c0:e4:01:22:94:16:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:1e:90:db:cb:22:42:fe:11:78:ea:f0:31:5a:97:4a:cd:f7:ad:d6
Fingerprint (sha256): 40:33:2d:d4:cb:02:dd:af:c1:60:f4:36:3a:4d:52:92:5a:9d:57:f0:73:04:9a:24:2c:a0:6c:c5:9d:32:be:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-49.gcs-web.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-49.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

21vianetgroupinc.gcs-web.com
2seventybio.gcs-web.com
acceleratesoftwarescquisitioncorp.gcs-web.com
agtc.gcs-web.com
alxinc.gcs-web.com
amplitude.gcs-web.com
arhaus.gcs-web.com
asminvestorday.gcs-web.com
bawaginvestorday.gcs-web.com
bioatla.gcs-web.com
buzzfeed.gcs-web.com
cingulatetherapeutics.gcs-web.com
cuehealth.gcs-web.com
docgo.gcs-web.com
doubledowninteractive.gcs-web.com
firstwatch.gcs-web.com
flexenergy.gcs-web.com
glginsights.gcs-web.com
greenidge.gcs-web.com
heartflow.gcs-web.com
hotelplanner.gcs-web.com
ifit.gcs-web.com
incytecorp.gcs-web.com
innovate.gcs-web.com
investor.incyte.com
investor.mesa-air.com
investorday.asm.com
investorday.bawaggroup.com
investorday.perpetual.com.au
investors.amplitude.com
investors.buzzfeed.com
investors.cuehealth.com
investors.firstwatch.com
investors.heartflow.com
investors.ifit.com
investors.isoplexis.com
investors.kennametal.com
investors.lianbio.com
investors.lilium.com
investors.maven.io
investors.metals.co
investors.phillipsedison.com
investors.portillos.com
investors.science37.com
investors.udemy.com
ir.21vianet.com
ir.2seventybio.com
ir.agtc.com
ir.arhaus.com
ir.bioatla.com
ir.buzzfeed.com
ir.docgo.com
ir.doubledowninteractive.com
ir.flexenergy.com
ir.glginsights.com
ir.greenidge.com
ir.ifit.com
ir.lilium.com
ir.microvast.com
ir.navios-mlp.com
ir.strongholddigitalmining.com
ir.vnet.com
ir.xiliotx.com
isoplexis.gcs-web.com
kennametal.gcs-web.com
leapfrog-ssl-49.gcs-web.com
lianbio.gcs-web.com
lilium.gcs-web.com
maven.gcs-web.com
mesaair.gcs-web.com
metals.gcs-web.com
microvast.gcs-web.com
millerknoll.gcs-web.com
naviosmlp.gcs-web.com
newsroom.parexel.com
oceandriveacquisition.gcs-web.com
parexel.gcs-web.com
perpetualinvestorday.gcs-web.com
phillipsedison.gcs-web.com
portillos.gcs-web.com
science37.gcs-web.com
strongholddigitalmining.gcs-web.com
udemy.gcs-web.com
www.acceleratesoftwareacqcorp.com
www.alx-inc.com
www.bzfd.com
www.cingulate.com
www.innovate-ir.com
www.oceandrivespac.com
xiliotx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-49.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCXr/NJI/Vc9myJtfDFe
I/6hqOrENKmRaSlGQie8+RZi3km5FhlCoACCTwUxpqTAilyf0gmpUONUlNSqenut
7VxZ8/catlLxUCvH00pyxXGmYWu/LlSb0h3JEZQPUl3ASBPGper69yxpxEUpEsWX
xHW7wg55WFnfT55UDlrmj1jamsIL7JTNInXTm07UyJOKCXhV2ushGraorip+yn1M
vlG2mUsCCFMB7VBaRsHOSYdzKXRIQs4U5IVunsSgXaF1dY7enYNPK6u4SQqbMTQb
WYGzAPQ2LHwiRs8GmW91wuzhJeaO+FvaOMVSWK/IFULQbxiCCX/ky6ZPsqfb7Xc1
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371248798641222230044575024706728457448681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 02:06:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 02:06:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25771314162679190057849795185381860241199622278382384813529447392301139823863793137292933620986445827698075879449042399079590051295721009316435627720093298472683311121760007661626644214996376555690011688808891086929384219672407136360613997753878994253349343023320265359950585583201598705757182449346783553001363966037694587201971296201320104509480192327846244430476620368234594461883215746736631643289686631388545464044761541396799733684116307665429083767204010719103713673440010248976925644770695706899771920141289470519038056147993036479253201860403417153865391747196836467048032268949562304401723178399939358569953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcb537b202d488cc122ad8d415c0e4012294162a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21vianetgroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2seventybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceleratesoftwarescquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alxinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplitude.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arhaus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asminvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bawaginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioatla.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cingulatetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docgo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doubledowninteractive.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstwatch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glginsights.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenidge.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartflow.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifit.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incytecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.mesa-air.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.asm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.bawaggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.perpetual.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.amplitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cuehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.firstwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heartflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.isoplexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kennametal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lianbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.metals.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.phillipsedison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.portillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.science37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.udemy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.21vianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.2seventybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bioatla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.buzzfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.docgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doubledowninteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flexenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.glginsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greenidge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ifit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lilium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.microvast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navios-mlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.strongholddigitalmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xiliotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoplexis.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennametal.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-49.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lianbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilium.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesaair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microvast.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millerknoll.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naviosmlp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsroom.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceandriveacquisition.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parexel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perpetualinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillipsedison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portillos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science37.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongholddigitalmining.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udemy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acceleratesoftwareacqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alx-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bzfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cingulate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate-ir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceandrivespac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiliotx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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