leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:39:3b:eb:dc:cc:b6:fc:de:08:d8:cf:0c:d3:95:3b:ca:08 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:39:3b:eb:dc:cc:b6:fc:de:08:d8:cf:0c:d3:95:3b:ca:08
Serial Number (int): 367924887761396834650801981612859695286792
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:24:8c:cc:71:8b:ef:eb:2d:13:99:4b:4a:2b:ae:c8:b9:4a:54:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:d4:8b:44:50:59:1c:a5:aa:d4:ef:a3:41:d1:70:15:61:70:21:11
Fingerprint (sha256): 4a:0a:99:05:5c:ec:ed:ac:02:90:66:0c:88:5a:cc:9c:2d:13:04:83:85:54:d5:dd:a3:1c:28:ad:b0:cf:38:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.ctfjewellerygroup.com
2021randdday.zailaboratory.com
aadibio.gcs-web.com
adagiotx.gcs-web.com
aerofarms.gcs-web.com
agilethought.gcs-web.com
arteris.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
cellebrite.gcs-web.com
clarus.gcs-web.com
composecure.gcs-web.com
ctfjewellerygroup.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
freshworks.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.freshworks.com
investor.securitynational.com
investor.tremorinternational.com
investorday.saputo.com
investors.adagiotx.com
investors.aerofarms.com
investors.cellebrite.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.intuitymedical.com
investors.oceanbiomedical.com
investors.otonomo.io
investors.rallybio.com
investors.sabrestrategicacquisitioncorp.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.tremorinternational.com
investors.vividseats.com
investors.waitrapp.com
investors.wcgclinical.com
investors.xostrucks.com
ir.aadibio.com
ir.agilethought.com
ir.arteris.com
ir.composecure.com
ir.doma.com
ir.freshworks.com
ir.gtec-tech.com
ir.immuneering.com
ir.nalumed.com
ir.netease.com
ir.neuronetics.com
ir.portagebiotech.com
ir.procept-biorobotics.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
netease.gcs-web.com
neuroneticsinc.gcs-web.com
oceanbiomedical.gcs-web.com
otonomo.gcs-web.com
portagebiotech.gcs-web.com
proceptbiorobotics.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
sabrestrategicacquisitioncorp.gcs-web.com
saputoinvestorday.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
tremorinternationalltd.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
vividseats.gcs-web.com
waitr.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com
xostrucks.gcs-web.com
zailabranddday.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybsKargtft+5wpsQV0fZ
IPbAxoTVanlC/B+dSS74uZl/9t/kFkd4817X4tzxjmdEm5IiJPwCDGVgfPs0qS33
wA98MIkMAlfXj10kLhznTSSGT686HqnfHKmVChaxtbND2Kx36AsltgH+6SU/hjoD
7S/9uPMd4DQDi/GeKhgXQQK4U+bJ3Oi8sGTcMU2POamOqpjeBH0psHXCTIMyYS4o
rMOTXIMN0Dbz4x/fhC7gRmJeRvrurTaXEAxdvCTY5j8IuIwgKHzDB2meZDQDWCud
8lRUg7ZAdcPqR9CZHRvtKABZxdBRIWRcwnxMWt530HuSdLbhrK/poVn7fU1QlgxU
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367924887761396834650801981612859695286792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 20:25:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 20:25:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25466132500443776275419057493730427805193542541956694485030999680694960196795634308514523457696472162064861326200593405139394821051643227223864176187567954281328057619934732036608682560305767277072349904391526739028151893746482652603357070818613708512787438159607998645257480895484294064358695904906816419904242976840078339805423008991150458165437192178395413725845616250067730295699814550974587611028629010046421366590095779613075493495710575210442458274588813956048329668434591475757750262926792941709596826941980413525926532005841513959567090538473032016857932369317674817187073674405192645028109234888454594909321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0248ccc718befeb2d13994b4a2baec8b94a5412
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.ctfjewellerygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021randdday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilethought.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellebrite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composecure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfjewellerygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.saputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cellebrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabrestrategicacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vividseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waitrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xostrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aadibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agilethought.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arteris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.composecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.netease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuronetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.procept-biorobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netease.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proceptbiorobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrestrategicacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saputoinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremorinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividseats.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xostrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c954be4eb000004030047304502200d71829e8f2e24ae1e45ba2545acbfbf0771c430a418e23e019367b25ea3b5bc022100e721519c03420c4df0d2b98a6a3028448e5161b7ce3caf683eda6a2c660d302a00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c954be4fc000004030046304402202be0df33cb04380fe394fa42e970e1190a251546080074d24aba4abcf8f31a42022046fb0ed8f1277ea15828f74dfd6515d29ccd022381f32a3254867b23bed9279d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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