leapfrog-ssl-43.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:57:6c:8d:00:51:8d:15:6f:fd:e6:fb:df:20:31:71:b9:21 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-43.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:6c:8d:00:51:8d:15:6f:fd:e6:fb:df:20:31:71:b9:21
Serial Number (int): 291085712461265355052503306214990815541537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:2e:97:bd:8a:3f:66:bf:1e:f9:3c:5b:c6:53:44:b0:0b:a8:15:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:6d:6b:a5:dd:84:bc:f7:e4:3f:1e:f8:34:1f:f6:11:25:44:dc:b8
Fingerprint (sha256): 48:b0:cf:0a:fa:71:75:94:ba:ff:93:34:5a:b7:b6:e6:b6:06:9f:58:bb:55:4f:37:c6:e5:71:07:4c:ef:0b:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-43.gcs-web.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-43.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1stdibs.gcs-web.com
achillestherapeuticsuklimited.gcs-web.com
aterian.gcs-web.com
aveanna.gcs-web.com
blueprintmedicines.gcs-web.com
calwatergroup.gcs-web.com
fabletics.gcs-web.com
fusionfuel.gcs-web.com
hearcom.gcs-web.com
hydrafacial.gcs-web.com
impelneuropharma.gcs-web.com
intercure.gcs-web.com
investor.pdl.com
investorday.veritone.com
investorday.whitemountains.com
investors.1stdibs.com
investors.fabletics.com
investors.hear.com
investors.honest.com
investors.hydrafacial.com
investors.impelnp.com
investors.knowbe4.com
investors.latch.com
investors.lee.net
investors.orphazyme.com
investors.paycor.com
investors.thetoppscompany.com
investors.vaccitech.co.uk
investors.werewolftx.com
investors.zymergen.com
ir.achillestx.com
ir.aterian.io
ir.aveanna.com
ir.blueprintmedicines.com
ir.calwatergroup.com
ir.fusion-fuel.eu
ir.kiromic.com
ir.priviahealth.com
ir.saniona.com
ir.semlerscientific.com
ir.soulapp.cn
ir.talaristx.com
ir.taskus.com
ir.tscan.com
ir.veratx.com
ir.xenex.com
kiromic.gcs-web.com
knowbe4.gcs-web.com
latch.gcs-web.com
leapfrog-ssl-43.gcs-web.com
lee.gcs-web.com
mudrickcapital.gcs-web.com
news.saniona.com
orphazyme.gcs-web.com
paycor.gcs-web.com
pdl.gcs-web.com
priviahealth.gcs-web.com
saniona.gcs-web.com
sanionapr.gcs-web.com
semlerscientific.gcs-web.com
soulapp.gcs-web.com
talaristherapeutics.gcs-web.com
taskus.gcs-web.com
thehonestcompany.gcs-web.com
thetoppscompany.gcs-web.com
tscan.gcs-web.com
vaccitech.gcs-web.com
veratherapeutics.gcs-web.com
veritone.gcs-web.com
werewolftx.gcs-web.com
whitemountainsinvestorday.gcs-web.com
www.intercure.co
www.mudrickcapitalacquisitioncorp.com
xenex.gcs-web.com
zymergen.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-43.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL6jCCCtKgAwIBAgISA1dsjQBRjRVv/eb73yAxcbkhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MjkxMDIxMzZaFw0yMTA3MjgxMDIxMzZaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC00My5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJfaPsNdsjV0ue39pzF+Yl2Lme2lWB/lNcfYMOZvoRTT2Aub
hXhDsUOw3gcUuJ0sY8pIbWQqX0NMT7Ix+OFgU1vn1Lpq8NQKQ7YB8m/OeGq7/X1j
rE2jZs1G8S3ZyM97B32rbozf8/PCpqIEHrClw5BIXeinC/XVP7vQ5QxVnYgGNy/2
degZYD7LMnKkhhRk3SpUUzIAbQqNXpGzSR80y+anKZIUPubSNGjZgHStWilcEiTk
nnWpltGwBERWnK0oFTishR4t8aXNZBQZINsjPAnfBichz1YNeDGG3WXH15rPBOb4
qlYX/QuNz6cm8x4O9OqEhDG/Thy5zQf2Wb+nLq8CAwEAAaOCCQQwggkAMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQU4C6XvYo/Zr8e+TxbxlNEsAuoFX8wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggbSBgNVHREEggbJMIIGxYITMXN0ZGlicy5nY3Mtd2Vi
LmNvbYIpYWNoaWxsZXN0aGVyYXBldXRpY3N1a2xpbWl0ZWQuZ2NzLXdlYi5jb22C
E2F0ZXJpYW4uZ2NzLXdlYi5jb22CE2F2ZWFubmEuZ2NzLXdlYi5jb22CHmJsdWVw
cmludG1lZGljaW5lcy5nY3Mtd2ViLmNvbYIZY2Fsd2F0ZXJncm91cC5nY3Mtd2Vi
LmNvbYIVZmFibGV0aWNzLmdjcy13ZWIuY29tghZmdXNpb25mdWVsLmdjcy13ZWIu
Y29tghNoZWFyY29tLmdjcy13ZWIuY29tghdoeWRyYWZhY2lhbC5nY3Mtd2ViLmNv
bYIcaW1wZWxuZXVyb3BoYXJtYS5nY3Mtd2ViLmNvbYIVaW50ZXJjdXJlLmdjcy13
ZWIuY29tghBpbnZlc3Rvci5wZGwuY29tghhpbnZlc3RvcmRheS52ZXJpdG9uZS5j
b22CHmludmVzdG9yZGF5LndoaXRlbW91bnRhaW5zLmNvbYIVaW52ZXN0b3JzLjFz
dGRpYnMuY29tghdpbnZlc3RvcnMuZmFibGV0aWNzLmNvbYISaW52ZXN0b3JzLmhl
YXIuY29tghRpbnZlc3RvcnMuaG9uZXN0LmNvbYIZaW52ZXN0b3JzLmh5ZHJhZmFj
aWFsLmNvbYIVaW52ZXN0b3JzLmltcGVsbnAuY29tghVpbnZlc3RvcnMua25vd2Jl
NC5jb22CE2ludmVzdG9ycy5sYXRjaC5jb22CEWludmVzdG9ycy5sZWUubmV0ghdp
bnZlc3RvcnMub3JwaGF6eW1lLmNvbYIUaW52ZXN0b3JzLnBheWNvci5jb22CHWlu
dmVzdG9ycy50aGV0b3Bwc2NvbXBhbnkuY29tghlpbnZlc3RvcnMudmFjY2l0ZWNo
LmNvLnVrghhpbnZlc3RvcnMud2VyZXdvbGZ0eC5jb22CFmludmVzdG9ycy56eW1l
cmdlbi5jb22CEWlyLmFjaGlsbGVzdHguY29tgg1pci5hdGVyaWFuLmlvgg5pci5h
dmVhbm5hLmNvbYIZaXIuYmx1ZXByaW50bWVkaWNpbmVzLmNvbYIUaXIuY2Fsd2F0
ZXJncm91cC5jb22CEWlyLmZ1c2lvbi1mdWVsLmV1gg5pci5raXJvbWljLmNvbYIT
aXIucHJpdmlhaGVhbHRoLmNvbYIOaXIuc2FuaW9uYS5jb22CF2lyLnNlbWxlcnNj
aWVudGlmaWMuY29tgg1pci5zb3VsYXBwLmNughBpci50YWxhcmlzdHguY29tgg1p
ci50YXNrdXMuY29tggxpci50c2Nhbi5jb22CDWlyLnZlcmF0eC5jb22CDGlyLnhl
bmV4LmNvbYITa2lyb21pYy5nY3Mtd2ViLmNvbYITa25vd2JlNC5nY3Mtd2ViLmNv
bYIRbGF0Y2guZ2NzLXdlYi5jb22CG2xlYXBmcm9nLXNzbC00My5nY3Mtd2ViLmNv
bYIPbGVlLmdjcy13ZWIuY29tghptdWRyaWNrY2FwaXRhbC5nY3Mtd2ViLmNvbYIQ
bmV3cy5zYW5pb25hLmNvbYIVb3JwaGF6eW1lLmdjcy13ZWIuY29tghJwYXljb3Iu
Z2NzLXdlYi5jb22CD3BkbC5nY3Mtd2ViLmNvbYIYcHJpdmlhaGVhbHRoLmdjcy13
ZWIuY29tghNzYW5pb25hLmdjcy13ZWIuY29tghVzYW5pb25hcHIuZ2NzLXdlYi5j
b22CHHNlbWxlcnNjaWVudGlmaWMuZ2NzLXdlYi5jb22CE3NvdWxhcHAuZ2NzLXdl
Yi5jb22CH3RhbGFyaXN0aGVyYXBldXRpY3MuZ2NzLXdlYi5jb22CEnRhc2t1cy5n
Y3Mtd2ViLmNvbYIcdGhlaG9uZXN0Y29tcGFueS5nY3Mtd2ViLmNvbYIbdGhldG9w
cHNjb21wYW55Lmdjcy13ZWIuY29tghF0c2Nhbi5nY3Mtd2ViLmNvbYIVdmFjY2l0
ZWNoLmdjcy13ZWIuY29tghx2ZXJhdGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghR2
ZXJpdG9uZS5nY3Mtd2ViLmNvbYIWd2VyZXdvbGZ0eC5nY3Mtd2ViLmNvbYIld2hp
dGVtb3VudGFpbnNpbnZlc3RvcmRheS5nY3Mtd2ViLmNvbYIQd3d3LmludGVyY3Vy
ZS5jb4Ild3d3Lm11ZHJpY2tjYXBpdGFsYWNxdWlzaXRpb25jb3JwLmNvbYIReGVu
ZXguZ2NzLXdlYi5jb22CFHp5bWVyZ2VuLmdjcy13ZWIuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF5HVzfVQAABAMARzBFAiB/
048H1vu7BKSCWrlC4pTlnjPNmRHaaCBtQkoYaqu3mgIhALTDxXInP4daKgGiB4bH
1KEqz0VX/FkmtFac6dwMhX76AHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyAL
zE7xZOMAAAF5HVzfLAAABAMARzBFAiEAmyk6i+igGUN2ctzsL9ABOyIvkz8fGcAU
ctxfhpjjeroCIBfoTpyp6MAdVSt8YDgx+SUusHNiOmsqPZpAZpOiGyL+MA0GCSqG
SIb3DQEBCwUAA4IBAQCtjMdoTBGxX8QxuPlS0T3ohf/NJ+D6ksra7o8+mHxAiHeo
wZIcetKuWDWIrfzAKFsVURzRF0t+wkzFkd+0E7JJE2VTCrqd1VsmodaESouiApzR
DFG3LeaV1OS3Mrv5DsVQ890S6HYj/p4UQdunZCFB0SL39peBnH9apnmPbpgcsVwH
vclxOy26pZc3Wwk+N8X2Hnjz5MmH+JURMUlluQoOUnuIs+hq6ieKqn5LoG6JqxSY
edp4D2NcedEWehzaLGXjk83z9pP+t5h6au/ey/GzgyBwLCPqMK0EImsGffPtjF8U
x/bNXTyl6WLqGuIgIpoCJIXTuO2FzdGsRsiPjT3Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9o+w12yNXS57f2nMX5i
XYuZ7aVYH+U1x9gw5m+hFNPYC5uFeEOxQ7DeBxS4nSxjykhtZCpfQ0xPsjH44WBT
W+fUumrw1ApDtgHyb854arv9fWOsTaNmzUbxLdnIz3sHfatujN/z88KmogQesKXD
kEhd6KcL9dU/u9DlDFWdiAY3L/Z16BlgPssycqSGFGTdKlRTMgBtCo1ekbNJHzTL
5qcpkhQ+5tI0aNmAdK1aKVwSJOSedamW0bAERFacrSgVOKyFHi3xpc1kFBkg2yM8
Cd8GJyHPVg14MYbdZcfXms8E5viqVhf9C43PpybzHg706oSEMb9OHLnNB/ZZv6cu
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291085712461265355052503306214990815541537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 10:21:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 10:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19169604753564719052606330701369574621722613028473440143570714367631742143117213177562361270328437802035544176184545235332802471996935342075107322615203474345122364911475105543214503497939601945578862670527626025558702813912253978181029279650965784059112172537061899779152666453548352132216107839486525393939681390024308714111105910100505858650409469720430333785254767812853653198415681360850198150439819957863287023378969695517579250459367718127858697469703443025782220181086958545550224395157465773406454529181260463543545160183626640471857534709452670251449643919929776522104525420216265319893940289490896462229167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e02e97bd8a3f66bf1ef93c5bc65344b00ba8157f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achillestherapeuticsuklimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aterian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveanna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintmedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwatergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabletics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionfuel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrafacial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelneuropharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.veritone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.whitemountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fabletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.honest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrafacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.knowbe4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.latch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orphazyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thetoppscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaccitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.werewolftx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.zymergen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.achillestx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aterian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aveanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.blueprintmedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fusion-fuel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiromic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.semlerscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.soulapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.talaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.taskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiromic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowbe4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudrickcapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orphazyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priviahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saniona.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanionapr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semlerscientific.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talaristherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehonestcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetoppscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccitech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werewolftx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemountainsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mudrickcapitalacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymergen.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001791d5cdf55000004030047304502207fd38f07d6fbbb04a4825ab942e294e59e33cd9911da68206d424a186aabb79a022100b4c3c572273f875a2a01a20786c7d4a12acf4557fc5926b4569ce9dc0c857efa007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001791d5cdf2c00000403004730450221009b293a8be8a019437672dcec2fd0013b222f933f1f19c01472dc5f8698e37aba022017e84e9ca9e8c01d552b7c603831f9252eb073623a6b2a3d9a406693a21b22fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad8cc7684c11b15fc431b8f952d13de885ffcd27e0fa92cadaee8f3e987c408877a8c1921c7ad2ae583588adfcc0285b15511cd1174b7ec24cc591dfb413b2491365530aba9dd55b26a1d6844a8ba2029cd10c51b72de695d4e4b732bbf90ec550f3dd12e87623fe9e1441dba7642141d122f7f697819c7f5aa6798f6e981cb15c07bdc9713b2dbaa597375b093e37c5f61e78f3e4c987f89511314965b90a0e527b88b3e86aea278aaa7e4ba06e89ab149879da780f635c79d1167a1cda2c65e393cdf3f693feb7987a6aefdecbf1b38320702c23ea30ad04226b067df3ed8c5f14c7f6cd5d3ca5e962ea1ae220229a022485d3b8ed85cdd1ac46c88f8d3dd0