leapfrog-ssl-36.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:36:97:9e:d4:ab:d2:0f:94:39:e8:27:89:43:a1:0f:7a:19 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-36.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:36:97:9e:d4:ab:d2:0f:94:39:e8:27:89:43:a1:0f:7a:19
Serial Number (int): 367025929664522696863113150152324978539033
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:7a:86:4f:3a:8c:95:9d:b5:df:ee:47:d2:d7:d1:ad:3f:9e:b3:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:77:3f:ac:f9:48:63:1c:19:fe:cc:af:93:e5:6a:c4:a2:14:d0:d2
Fingerprint (sha256): 49:de:ac:c7:b3:4c:a0:52:bc:4f:ff:eb:7d:cb:32:95:20:bc:83:24:7a:bc:24:1d:77:37:e2:8d:a6:30:b1:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-36.gcs-web.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-36.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligostherapeutics.gcs-web.com
allakos.gcs-web.com
ambarella.gcs-web.com
arcadiabiosciencesinc.gcs-web.com
arenapharm.gcs-web.com
arraytechnologiesinc.gcs-web.com
axonicsmodulation.gcs-web.com
backblaze.gcs-web.com
codiakbio.gcs-web.com
eargo.gcs-web.com
endologix.gcs-web.com
fmbank.gcs-web.com
foghorntx.gcs-web.com
fstar.gcs-web.com
genmarkdiagnosticsinc.gcs-web.com
glpropinc.gcs-web.com
henryschein.gcs-web.com
invest.arenapharm.com
investor.aligos.com
investor.allakos.com
investor.ambarella.com
investor.arenapharm.com
investor.endologix.com
investor.henryschein.com
investor.lgihomes.com
investor.natera.com
investor.praxismedicines.com
investor.seaspine.com
investor.startek.com
investor.xilinx.com
investors.f-star.com
investors.glpropinc.com
investors.praxismedicines.com
investors.pulsebiosciences.com
investors.ravenind.com
investors.sciplay.com
investors.sprucebiosciences.com
investors.theoncologyinstitute.com
investors.troweprice.com
ir.arcadiabio.com
ir.arraytechinc.com
ir.axonics.com
ir.backblaze.com
ir.codiakbio.com
ir.eargo.com
ir.fm.bank
ir.foghorntx.com
ir.genmarkdx.com
ir.landec.com
ir.latticesemi.com
ir.medicenna.com
ir.neogames.com
ir.nuvasive.com
ir.praxismedicines.com
ir.sandersonfarms.com
ir.shattucklabs.com
ir.travere.com
ir.willdangroup.com
landeccorporation.gcs-web.com
latticesemi.gcs-web.com
leapfrog-ssl-36.gcs-web.com
lgihomes.gcs-web.com
medicennatherapeutics.gcs-web.com
natera.gcs-web.com
neogames.gcs-web.com
nuvasiveinc.gcs-web.com
plusproductsinc.gcs-web.com
praxismedicines.gcs-web.com
press.redfin.com
pulsebiosciences.gcs-web.com
ravenindustriesinc.gcs-web.com
redfincorp.gcs-web.com
rockyniri.gcs-web.com
sandersonfarmsinc.gcs-web.com
sciplay.gcs-web.com
seaspineholdingscorporation.gcs-web.com
shattucklabs.gcs-web.com
sprucebiosciences.gcs-web.com
startek.gcs-web.com
toimanagement.gcs-web.com
travere.gcs-web.com
troweprice.gcs-web.com
willdangroupinc.gcs-web.com
www.plusproductsinc.com
www.rockyniri.org
xilinx.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-36.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8xo/JJqUj2gmvBfLadE
jOI5D+8ng/vfIOzaU+pDDeTEASzeByCjYt93gE+EpsXBrUofng/5Sf+70Qfl3bQ7
av69yL7CqZk+4LWDZkqn77X1rd7o+H8veN39u/M+iN0ODF0hJpDj+Lvj/LnsFoFE
R5ouJB11hSIWhlwSzGu++6CixAodllFqgOukzNnmnWmz71R5Vn2njulSTbSnrWrp
h3zKqBZEbVSElMm6Nuisdq36MujMzoXMYex5p0d9CQRC3L/ikBT9VMOaQbCAQ1Dd
RM6tlacyZBxiVrGGDSSAua15Vpp4LndzIoZPt5YQ676KEZ2ejkO8Kx6M/0dDNuR4
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367025929664522696863113150152324978539033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-05 18:56:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 18:56:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24212314627577971762391875122030255736303648564521813236307080877992244042521744979607766501962760700707301640720941945285981544426720935416182324010817127529906311346811599447057489677729094899759409119858457715480870416114535137343700073570604782700379286999716711810083784788118520061690625682819522462899779719636032499432156936380210966626728694383793104871481915958532707028796705996333149303569916856736496425102836592833489424412971801293662559628006184306115947110845693392329404179068251118974796972577221333822298977030596924054334684881674737612567597456193754865966543999507834364819201030358607291775101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc7a864f3a8c959db5dfee47d2d7d1ad3f9eb3c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligostherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allakos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambarella.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadiabiosciencesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arraytechnologiesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axonicsmodulation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backblaze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codiakbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eargo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foghorntx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fstar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmarkdiagnosticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glpropinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henryschein.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.aligos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.allakos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ambarella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.arenapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.henryschein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lgihomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.natera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seaspine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.startek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.xilinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.f-star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.glpropinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pulsebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ravenind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sciplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.theoncologyinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.troweprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arcadiabio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arraytechinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.axonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.backblaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codiakbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fm.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.foghorntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genmarkdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.landec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.latticesemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.medicenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nuvasive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sandersonfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.shattucklabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.travere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.willdangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landeccorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latticesemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-36.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgihomes.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicennatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natera.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neogames.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvasiveinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusproductsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.redfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravenindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfincorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockyniri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandersonfarmsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciplay.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaspineholdingscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shattucklabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startek.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toimanagement.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travere.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troweprice.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willdangroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plusproductsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockyniri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xilinx.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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