leapfrog-ssl-43.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b4:1e:0f:99:49:b4:54:85:de:00:cf:89:a6:e5:d4:ee:e6 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-43.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b4:1e:0f:99:49:b4:54:85:de:00:cf:89:a6:e5:d4:ee:e6
Serial Number (int): 409739927606184470214458108589277992775398
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:c7:6b:95:ba:51:56:dd:17:03:d4:32:bb:ff:67:c4:fc:80:5d:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:b0:6a:af:99:2b:70:b8:7a:b3:49:a9:f6:40:ce:e7:13:d2:67:a8
Fingerprint (sha256): 4b:bf:72:9d:ad:d8:f5:d5:b3:e7:f6:50:5e:be:e8:bf:f9:93:d9:9c:8c:a9:8a:17:95:48:f1:58:4e:c9:f3:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-43.gcs-web.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-43.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1stdibs.gcs-web.com
achillestherapeuticsuklimited.gcs-web.com
adusa.gcs-web.com
aterian.gcs-web.com
avantax.gcs-web.com
aveanna.gcs-web.com
avidinvestorday.gcs-web.com
blueprintmedicines.gcs-web.com
calwatergroup.gcs-web.com
caratherapeutics.gcs-web.com
crisprtx.gcs-web.com
fusionfuel.gcs-web.com
gritstoneoncology.gcs-web.com
hearcom.gcs-web.com
hydrafacial.gcs-web.com
impelneuropharma.gcs-web.com
inmedpharmaceuticalsinc.gcs-web.com
intercure.gcs-web.com
investor.lennox.com
investor.lifestance.com
investor.pdl.com
investorandanalystday.perkinelmer.com
investorday.avid.com
investorday.ncrvoyix.com
investorday.veritone.com
investorday.whitemountains.com
investors.1stdibs.com
investors.barinthusbio.com
investors.beautyhealth.com
investors.hear.com
investors.honest.com
investors.hydrafacial.com
investors.impelnp.com
investors.lee.net
investors.middleby.com
investors.orphazyme.com
investors.paycor.com
investors.universallogistics.com
investors.vaccitech.co.uk
investors.werewolftx.com
ir.achillestx.com
ir.aterian.io
ir.aveanna.com
ir.blueprintmedicines.com
ir.caratherapeutics.com
ir.crisprtx.com
ir.fusion-fuel.eu
ir.gritstonebio.com
ir.kiromic.com
ir.priviahealth.com
ir.semlerscientific.com
ir.soulapp.cn
ir.talaristx.com
ir.taskus.com
ir.tscan.com
ir.veratx.com
kiromic.gcs-web.com
leapfrog-ssl-43.gcs-web.com
lee.gcs-web.com
lennox.gcs-web.com
lennoxinternational.gcs-web.com
lifestancehealth.gcs-web.com
middlebycorporation.gcs-web.com
ncrvoyixinvestorday.gcs-web.com
orphazyme.gcs-web.com
paycor.gcs-web.com
pdl.gcs-web.com
perkinelmeranalystday.gcs-web.com
priviahealth.gcs-web.com
saniona.gcs-web.com
sanionapr.gcs-web.com
semlerscientific.gcs-web.com
soulapp.gcs-web.com
talaristherapeutics.gcs-web.com
taskus.gcs-web.com
thehonestcompany.gcs-web.com
tscan.gcs-web.com
universallogisticsholdingsinc.gcs-web.com
vaccitech.gcs-web.com
veratherapeutics.gcs-web.com
veritone.gcs-web.com
voltalia.gcs-web.com
werewolftx.gcs-web.com
whitemountainsinvestorday.gcs-web.com
www.adusasc.com
www.beautyhealth.com
www.intercure.co
www.investor.lennox.com
www.pdl.com
www.voltalia.com
xenex.gcs-web.com
zymergen.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-43.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINmzCCDIOgAwIBAgISBLQeD5lJtFSF3gDPiabl1O7mMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTYxNTM5NDhaFw0yNDA0MTUxNTM5NDdaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC00My5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr1NchQcqwX39W4PcTcnErJJbCMX+72AM1CLUWPeRgpOkVZ
E8xwNoTOZfpAq2SPs42aOdlKFyZrvrnwreb6yJWRJG9nG6AsHirktfR5JJIvqnWW
G3r+JQBxpCpopn/fJcgRDKFPH2kqRYElN5O3E6HJwP1yi8BiYXh/WzYr/KjU1Yhy
ECTTPxIu2sx2upg5pGH9QSzHtps1Xvyye4Q0mQbRnzGE97AldxqGWMp+crXPaZw5
gDqoQQk0NWhzxuFlKw4lWnKpZ0Th98uff79MJecXoQoXxPHvwHAwGFuFKsp6NSXI
HS46XlSBxilsrNOo11nITq8kJSyge1/FmS30OL0CAwEAAaOCCrUwggqxMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUVMdrlbpRVt0XA9Qyu/9nxPyAXW4wHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggi8BgNVHREEggizMIIIr4ITMXN0ZGlicy5nY3Mtd2Vi
LmNvbYIpYWNoaWxsZXN0aGVyYXBldXRpY3N1a2xpbWl0ZWQuZ2NzLXdlYi5jb22C
EWFkdXNhLmdjcy13ZWIuY29tghNhdGVyaWFuLmdjcy13ZWIuY29tghNhdmFudGF4
Lmdjcy13ZWIuY29tghNhdmVhbm5hLmdjcy13ZWIuY29tghthdmlkaW52ZXN0b3Jk
YXkuZ2NzLXdlYi5jb22CHmJsdWVwcmludG1lZGljaW5lcy5nY3Mtd2ViLmNvbYIZ
Y2Fsd2F0ZXJncm91cC5nY3Mtd2ViLmNvbYIcY2FyYXRoZXJhcGV1dGljcy5nY3Mt
d2ViLmNvbYIUY3Jpc3BydHguZ2NzLXdlYi5jb22CFmZ1c2lvbmZ1ZWwuZ2NzLXdl
Yi5jb22CHWdyaXRzdG9uZW9uY29sb2d5Lmdjcy13ZWIuY29tghNoZWFyY29tLmdj
cy13ZWIuY29tghdoeWRyYWZhY2lhbC5nY3Mtd2ViLmNvbYIcaW1wZWxuZXVyb3Bo
YXJtYS5nY3Mtd2ViLmNvbYIjaW5tZWRwaGFybWFjZXV0aWNhbHNpbmMuZ2NzLXdl
Yi5jb22CFWludGVyY3VyZS5nY3Mtd2ViLmNvbYITaW52ZXN0b3IubGVubm94LmNv
bYIXaW52ZXN0b3IubGlmZXN0YW5jZS5jb22CEGludmVzdG9yLnBkbC5jb22CJWlu
dmVzdG9yYW5kYW5hbHlzdGRheS5wZXJraW5lbG1lci5jb22CFGludmVzdG9yZGF5
LmF2aWQuY29tghhpbnZlc3RvcmRheS5uY3J2b3lpeC5jb22CGGludmVzdG9yZGF5
LnZlcml0b25lLmNvbYIeaW52ZXN0b3JkYXkud2hpdGVtb3VudGFpbnMuY29tghVp
bnZlc3RvcnMuMXN0ZGlicy5jb22CGmludmVzdG9ycy5iYXJpbnRodXNiaW8uY29t
ghppbnZlc3RvcnMuYmVhdXR5aGVhbHRoLmNvbYISaW52ZXN0b3JzLmhlYXIuY29t
ghRpbnZlc3RvcnMuaG9uZXN0LmNvbYIZaW52ZXN0b3JzLmh5ZHJhZmFjaWFsLmNv
bYIVaW52ZXN0b3JzLmltcGVsbnAuY29tghFpbnZlc3RvcnMubGVlLm5ldIIWaW52
ZXN0b3JzLm1pZGRsZWJ5LmNvbYIXaW52ZXN0b3JzLm9ycGhhenltZS5jb22CFGlu
dmVzdG9ycy5wYXljb3IuY29tgiBpbnZlc3RvcnMudW5pdmVyc2FsbG9naXN0aWNz
LmNvbYIZaW52ZXN0b3JzLnZhY2NpdGVjaC5jby51a4IYaW52ZXN0b3JzLndlcmV3
b2xmdHguY29tghFpci5hY2hpbGxlc3R4LmNvbYINaXIuYXRlcmlhbi5pb4IOaXIu
YXZlYW5uYS5jb22CGWlyLmJsdWVwcmludG1lZGljaW5lcy5jb22CF2lyLmNhcmF0
aGVyYXBldXRpY3MuY29tgg9pci5jcmlzcHJ0eC5jb22CEWlyLmZ1c2lvbi1mdWVs
LmV1ghNpci5ncml0c3RvbmViaW8uY29tgg5pci5raXJvbWljLmNvbYITaXIucHJp
dmlhaGVhbHRoLmNvbYIXaXIuc2VtbGVyc2NpZW50aWZpYy5jb22CDWlyLnNvdWxh
cHAuY26CEGlyLnRhbGFyaXN0eC5jb22CDWlyLnRhc2t1cy5jb22CDGlyLnRzY2Fu
LmNvbYINaXIudmVyYXR4LmNvbYITa2lyb21pYy5nY3Mtd2ViLmNvbYIbbGVhcGZy
b2ctc3NsLTQzLmdjcy13ZWIuY29tgg9sZWUuZ2NzLXdlYi5jb22CEmxlbm5veC5n
Y3Mtd2ViLmNvbYIfbGVubm94aW50ZXJuYXRpb25hbC5nY3Mtd2ViLmNvbYIcbGlm
ZXN0YW5jZWhlYWx0aC5nY3Mtd2ViLmNvbYIfbWlkZGxlYnljb3Jwb3JhdGlvbi5n
Y3Mtd2ViLmNvbYIfbmNydm95aXhpbnZlc3RvcmRheS5nY3Mtd2ViLmNvbYIVb3Jw
aGF6eW1lLmdjcy13ZWIuY29tghJwYXljb3IuZ2NzLXdlYi5jb22CD3BkbC5nY3Mt
d2ViLmNvbYIhcGVya2luZWxtZXJhbmFseXN0ZGF5Lmdjcy13ZWIuY29tghhwcml2
aWFoZWFsdGguZ2NzLXdlYi5jb22CE3NhbmlvbmEuZ2NzLXdlYi5jb22CFXNhbmlv
bmFwci5nY3Mtd2ViLmNvbYIcc2VtbGVyc2NpZW50aWZpYy5nY3Mtd2ViLmNvbYIT
c291bGFwcC5nY3Mtd2ViLmNvbYIfdGFsYXJpc3RoZXJhcGV1dGljcy5nY3Mtd2Vi
LmNvbYISdGFza3VzLmdjcy13ZWIuY29tghx0aGVob25lc3Rjb21wYW55Lmdjcy13
ZWIuY29tghF0c2Nhbi5nY3Mtd2ViLmNvbYIpdW5pdmVyc2FsbG9naXN0aWNzaG9s
ZGluZ3NpbmMuZ2NzLXdlYi5jb22CFXZhY2NpdGVjaC5nY3Mtd2ViLmNvbYIcdmVy
YXRoZXJhcGV1dGljcy5nY3Mtd2ViLmNvbYIUdmVyaXRvbmUuZ2NzLXdlYi5jb22C
FHZvbHRhbGlhLmdjcy13ZWIuY29tghZ3ZXJld29sZnR4Lmdjcy13ZWIuY29tgiV3
aGl0ZW1vdW50YWluc2ludmVzdG9yZGF5Lmdjcy13ZWIuY29tgg93d3cuYWR1c2Fz
Yy5jb22CFHd3dy5iZWF1dHloZWFsdGguY29tghB3d3cuaW50ZXJjdXJlLmNvghd3
d3cuaW52ZXN0b3IubGVubm94LmNvbYILd3d3LnBkbC5jb22CEHd3dy52b2x0YWxp
YS5jb22CEXhlbmV4Lmdjcy13ZWIuY29tghR6eW1lcmdlbi5nY3Mtd2ViLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjRMks6QAAAQDAEcwRQIh
AJwMCw3KAxVwq/FZjOUPhESBp7OETWmeECDx1CkoFazzAiA5sWGMC4RCdFGFeoU1
8/+fUjBlKRmtypECiuNNvLGkLwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABjRMks7MAAAQDAEcwRQIgBN1+uVzikzuoksxNVeBDe/eBWyYhHAJP
FANdk0jx6PICIQC9aeR/zFBMf9Eu0ys8ttO2jm/kDt6ItGQMV4dQyMf9+zANBgkq
hkiG9w0BAQsFAAOCAQEAOYnMtLYb13sEpYnlmfKxGIz62hoQerB7MqmuMP1JfzIb
3HVDpQQ9oqybe1Ide0cEE6a5oZEffErUl6AUm+Sqgfoh5tWEe77JvfJnob0RmpqA
giIaQXKlY4UF3MGuqWc1Vz088f3Je6cNwzDIgz7SRcDth9Vh/DD0cjs9wEg+sUQd
1x/oDmPyl72/9lBxzMwtHf7HSB1Ms6jr7trw1oIfUvYva3YCJ0Ns76TkoNWCWXAq
/eXtWfNp0+Jli8Y1z8HRuPxUpvOe+oWOxnvu4eNkpUiHwpb2jSMLPjEE21DWsJKO
fQH2E7ImW5b4A1oZuDFkpUdtsMU4zNi1vfJ3dK6iYw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvU1yFByrBff1bg9xNyc
SsklsIxf7vYAzUItRY95GCk6RVkTzHA2hM5l+kCrZI+zjZo52UoXJmu+ufCt5vrI
lZEkb2cboCweKuS19Hkkki+qdZYbev4lAHGkKmimf98lyBEMoU8faSpFgSU3k7cT
ocnA/XKLwGJheH9bNiv8qNTViHIQJNM/Ei7azHa6mDmkYf1BLMe2mzVe/LJ7hDSZ
BtGfMYT3sCV3GoZYyn5ytc9pnDmAOqhBCTQ1aHPG4WUrDiVacqlnROH3y59/v0wl
5xehChfE8e/AcDAYW4Uqyno1JcgdLjpeVIHGKWys06jXWchOryQlLKB7X8WZLfQ4
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409739927606184470214458108589277992775398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 15:39:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 15:39:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25621055204100147920279793126271452284008521489367575549283527790947172121091437743322706371249969610731368202146899690573205384995629267297376497908869330282055394629963454791213919952845229821368126278412545668214565568576514379432440397983999645780239909295340691961531427968372770679904629998586018259210840777933352296004498485935957223882942068650078906970310039179918076302957965848266562291640649408791992488009251223786826553532783310036146814388805624663370754114374073329261135989612242457035685980901939039074803472176882760583703852454064717964002707762644673915442360537576488718875481556609748203485373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54c76b95ba5156dd1703d432bbff67c4fc805d6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2227 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achillestherapeuticsuklimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adusa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aterian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantax.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveanna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintmedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwatergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisprtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionfuel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gritstoneoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrafacial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelneuropharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmedpharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lennox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lifestance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorandanalystday.perkinelmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.avid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.ncrvoyix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.veritone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.whitemountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.barinthusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.honest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrafacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.middleby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orphazyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.universallogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaccitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.werewolftx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.achillestx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aterian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aveanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.blueprintmedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crisprtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fusion-fuel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gritstonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiromic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.semlerscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.soulapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.talaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.taskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiromic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennox.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennoxinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestancehealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlebycorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncrvoyixinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orphazyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkinelmeranalystday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priviahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saniona.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanionapr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semlerscientific.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talaristherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehonestcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universallogisticsholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccitech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voltalia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werewolftx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemountainsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adusasc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.lennox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymergen.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1324b3a400000403004730450221009c0c0b0dca031570abf1598ce50f844481a7b3844d699e1020f1d4292815acf3022039b1618c0b84427451857a8535f3ff9f5230652919adca91028ae34dbcb1a42f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d1324b3b30000040300473045022004dd7eb95ce2933ba892cc4d55e0437bf7815b26211c024f14035d9348f1e8f2022100bd69e47fcc504c7fd12ed32b3cb6d3b68e6fe40ede88b4640c578750c8c7fdfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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