leapfrog-ssl-36.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f9:37:41:9c:2a:e6:8e:48:09:7b:16:43:c6:ab:9a:a8:de was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-36.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:37:41:9c:2a:e6:8e:48:09:7b:16:43:c6:ab:9a:a8:de
Serial Number (int): 433252901296873473680851698903381861640414
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:2b:b8:e3:26:b7:c0:e0:95:c6:4b:bc:6e:4b:d4:dd:89:57:0f:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:bf:0b:c7:ca:58:62:e4:4c:14:1f:80:81:02:77:2b:85:e1:09:fa
Fingerprint (sha256): 43:d2:26:38:86:61:45:29:b6:7d:09:23:ba:be:a6:88:dc:1a:dc:37:18:92:9d:aa:3d:e0:30:42:39:47:17:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-36.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-36.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligostherapeutics.gcs-web.com
allakos.gcs-web.com
ambarella.gcs-web.com
arcadiabiosciencesinc.gcs-web.com
arenapharm.gcs-web.com
arraytechnologiesinc.gcs-web.com
axonicsmodulation.gcs-web.com
beigeneltd.gcs-web.com
codiakbio.gcs-web.com
dolbylaboratoriesinc.gcs-web.com
eargo.gcs-web.com
edwardslifesciencescorporation.gcs-web.com
efi.gcs-web.com
endologix.gcs-web.com
fmbank.gcs-web.com
foghorntx.gcs-web.com
fstar.gcs-web.com
genmarkdiagnosticsinc.gcs-web.com
glpropinc.gcs-web.com
henryschein.gcs-web.com
invest.arenapharm.com
investor.aligos.com
investor.allakos.com
investor.ambarella.com
investor.arenapharm.com
investor.dolby.com
investor.endologix.com
investor.henryschein.com
investor.lgihomes.com
investor.natera.com
investor.praxismedicines.com
investor.seaspine.com
investor.startek.com
investor.xilinx.com
investors.f-star.com
investors.glpropinc.com
investors.praxismedicines.com
investors.pulsebiosciences.com
investors.ravenind.com
investors.sciplay.com
investors.sprucebiosciences.com
investors.taylormorrison.com
investors.troweprice.com
ir.arcadiabio.com
ir.arraytechinc.com
ir.axonics.com
ir.beigene.com
ir.codiakbio.com
ir.eargo.com
ir.edwards.com
ir.efi.com
ir.fm.bank
ir.foghorntx.com
ir.genmarkdx.com
ir.landec.com
ir.latticesemi.com
ir.medicenna.com
ir.neogames.com
ir.nuvasive.com
ir.praxismedicines.com
ir.sandersonfarms.com
ir.shattucklabs.com
ir.travere.com
ir.willdangroup.com
landeccorporation.gcs-web.com
latticesemi.gcs-web.com
leapfrog-ssl-36.gcs-web.com
lgihomes.gcs-web.com
medicennatherapeutics.gcs-web.com
natera.gcs-web.com
neogames.gcs-web.com
nuvasiveinc.gcs-web.com
plusproductsinc.gcs-web.com
praxismedicines.gcs-web.com
press.redfin.com
pulsebiosciences.gcs-web.com
ravenindustriesinc.gcs-web.com
redfincorp.gcs-web.com
rockyniri.gcs-web.com
sandersonfarmsinc.gcs-web.com
sciplay.gcs-web.com
seaspineholdingscorporation.gcs-web.com
shattucklabs.gcs-web.com
sprucebiosciences.gcs-web.com
startek.gcs-web.com
taylormorrison.gcs-web.com
travere.gcs-web.com
troweprice.gcs-web.com
willdangroupinc.gcs-web.com
www.plusproductsinc.com
www.rockyniri.org
xilinx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-36.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtMgOsFqKR6f9pT/xBGf
Nn+gBu8MMnTSNMMakW83DA5McCpdcQOoIRcMlXlsOYPif6RYbwJfivysUfduWVEl
TWVbNLfmKWFnsBM+mJgGqP4LxhsSKEKudRCdERHplC3wX7WNTOrewmffx5w7WaeA
6XJ4lPhB/C8DOG3lac6Lns1LwLKR43irakDP0YqbxWBPAzdt69JoOKk+dJscF/Wf
1WpWfr2U0//+C9opz+FWZks2C90ddgJze5fJxync/5V7yybZmAHm75+4csO0hg/X
aAvF1K7kcZOevG8bMB8D8827U0DVOMv3ys9SdjkrFicmkW3uRUJ5Q24QTxz36aPi
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433252901296873473680851698903381861640414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 12:00:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 12:00:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24089388003369182159509886003327770010399079966999281185432383965526068629363477421993264404370178554750323984796012777941156805437423505109886687347724648787194114015414526718984446131277464426733634366198401550219568900606002746532491528099839909776640321891466726495940366480800967678995359542113927444000098467013821903621387759725260071341450805416738245501783792540286044599767097707195295493654853184135137131287909285258676844558854616932364857033933533885681145868793597354754211889757909604453211377229663822601730363257565575361919661143710264119491374261349303992360722186163035795087308289795816199283349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc2bb8e326b7c0e095c64bbc6e4bd4dd89570f5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligostherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allakos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambarella.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadiabiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arraytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axonicsmodulation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beigeneltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codiakbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolbylaboratoriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eargo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwardslifesciencescorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foghorntx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmarkdiagnosticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glpropinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryschein.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aligos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allakos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ambarella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dolby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.henryschein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lgihomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.natera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seaspine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.startek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xilinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.f-star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.glpropinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulsebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ravenind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sciplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.taylormorrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.troweprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcadiabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arraytechinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.beigene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codiakbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.edwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.efi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fm.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.foghorntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genmarkdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.landec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.medicenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nuvasive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sandersonfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.shattucklabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.travere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.willdangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landeccorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgihomes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicennatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neogames.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvasiveinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusproductsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.redfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravenindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfincorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockyniri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandersonfarmsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciplay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaspineholdingscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattucklabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylormorrison.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travere.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troweprice.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willdangroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plusproductsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockyniri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilinx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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