leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:74:ea:b4:1b:1f:d5:9c:6c:48:c7:04:94:84:2a:1c:5e:a1 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:ea:b4:1b:1f:d5:9c:6c:48:c7:04:94:84:2a:1c:5e:a1
Serial Number (int): 388233872804465296678894867581063489412769
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0b:71:e5:ad:8e:1d:84:b8:69:33:0a:31:af:ff:7e:89:81:22:16:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:75:12:ef:19:3a:95:a9:ae:89:1f:6d:c7:48:e4:e5:f0:14:23:9d
Fingerprint (sha256): 4d:f1:07:ca:17:95:cf:1b:47:75:46:35:ea:66:d1:af:2e:96:97:fe:03:9c:0c:56:dc:08:42:20:9a:1a:06:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.ctfjewellerygroup.com
2021randdday.zailaboratory.com
aadibio.gcs-web.com
adagiotx.gcs-web.com
aerofarms.gcs-web.com
agilethought.gcs-web.com
arteris.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
cellebrite.gcs-web.com
clarus.gcs-web.com
composecure.gcs-web.com
ctfjewellerygroup.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
freshworks.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.securitynational.com
investor.tremorinternational.com
investorday.saputo.com
investors.adagiotx.com
investors.aerofarms.com
investors.cellebrite.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.intuitymedical.com
investors.oceanbiomedical.com
investors.otonomo.io
investors.rallybio.com
investors.sabrestrategicacquisitioncorp.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.tremorinternational.com
investors.waitrapp.com
investors.wcgclinical.com
investors.xostrucks.com
ir.aadibio.com
ir.agilethought.com
ir.arteris.com
ir.composecure.com
ir.doma.com
ir.freshworks.com
ir.gtec-tech.com
ir.immuneering.com
ir.nalumed.com
ir.netease.com
ir.neuronetics.com
ir.portagebiotech.com
ir.procept-biorobotics.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
netease.gcs-web.com
neuroneticsinc.gcs-web.com
oceanbiomedical.gcs-web.com
otonomo.gcs-web.com
portagebiotech.gcs-web.com
proceptbiorobotics.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
sabrestrategicacquisitioncorp.gcs-web.com
saputoinvestorday.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
tremorinternationalltd.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
waitr.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com
xostrucks.gcs-web.com
zailabranddday.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l4P+Wd13L6/FWmvvfhT
X+Q8arVFQvuHC9BkUshFsc1QZQ/JdGSt+7AmQ2/zW37cZ4mhjwKrjPvZchMAJlDI
Vxcq+aZeBjCqQedssxXqN7S69bqQRy6zTznQ1629LF6kZvWq+ch0Z9euyAvk52m0
5/6FMuUMpQ4QKZnNyA/uWxVIePX4QZGBpM/M7nw3cd3qBz6OqxDBkIJH+TPtJ1/k
il+HLtown4uxZiY6esXoeVPbYDvR9WSEXfYqr0TGdWGTq2bXsg+vN57W+K87Nj92
+G3eMscNm4uP9SEnjDLFAscOep8D3fGJxwCTVzjMo/AGTJREhYfXABd+6SduU8te
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388233872804465296678894867581063489412769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 11:26:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 11:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26556427940745906557127949303645701692567753537876719818672955445011110360174522317057918662632712543490633797245188665276784386014299805534181695232986554322062476905667172526090136599800085637777439560230716203356240833249292895696417911336333461234827345743275148948797331827572797355985181684154112442129996398574485816992956337714850345604977233955969523759221974295198524619322485286931182143557561657323029749249550472710910221552342977307708445493861041843342453688593333118662644705924758499177691842347732612155722601160139591605837555855996575333830058073718114593506658045231321066038386801179251134127697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b71e5ad8e1d84b869330a31afff7e8981221663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.ctfjewellerygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021randdday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilethought.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellebrite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composecure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfjewellerygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.saputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cellebrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabrestrategicacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waitrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xostrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aadibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agilethought.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arteris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.composecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.netease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuronetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.procept-biorobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netease.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proceptbiorobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrestrategicacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saputoinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremorinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xostrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017bca864c4e00000403004730450221009a6742578eb87154b36f60a587422836180a867c9559e6408fd8d5c46181557a022054732986f6af0b0cff3426d792a23d2545a27f246b78b2a47e2c0d33c597bf530077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017bca864cdf0000040300483046022100c00b946157d42fbafa61cdb230759ebb8868f87d35370eba7878a5fb7e734ad5022100b3eaf4f172dde146f39083abde7209856965c49e320a221e7910c9e7fdc93121
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032f1ba46245f3764f7735f2a15372b37e42786fb5536baaedb099b5de4a4c6fef83ee716bbd07c8ae6e0cf1665b8280ea8ee68512b4104bc16a8addd67a99a2e28685743e8b8fec6b001fd087460b5c69836a02b4acb696f288bbb7597bbba06f8da185b73e58e267ab6a686ce7628523d1840f375d2cce2c1f7f4ee5a9ade8057f6904521308b78f626bef368f10680fa4e629c04822cd451e6a76444e2796d2230c190c2840419dab6d91c24b0f45025e68e2fc666486ebc84ff165001861f562f046c8120b00015d21715298e494219644c4d323e6642aba9f61c36eaa0ff6fdb94a701f16d0680c27671f8af499a11d3d4945b9ce73924c7a4426c15600c