leapfrog-ssl-43.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:be:40:17:fd:17:4a:63:35:66:53:21:f8:ed:b5:b6:30 was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-43.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:be:40:17:fd:17:4a:63:35:66:53:21:f8:ed:b5:b6:30
Serial Number (int): 401786079079452821215935158158167264048688
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:b1:06:d9:99:88:d3:18:c6:3d:ab:9f:a2:f9:8a:9d:4b:a5:d5:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:a8:f7:e7:dc:eb:69:48:d8:15:ad:83:33:79:c7:dc:07:e5:5a:c2
Fingerprint (sha256): 53:0c:2a:68:b5:7c:9f:92:b6:e6:7c:92:04:00:e1:f5:3a:ce:22:8f:df:3b:06:0a:ca:2b:15:60:07:80:12:e8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-43.gcs-web.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-43.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1stdibs.gcs-web.com
achillestherapeuticsuklimited.gcs-web.com
aterian.gcs-web.com
aveanna.gcs-web.com
avidinvestorday.gcs-web.com
blueprintmedicines.gcs-web.com
calwatergroup.gcs-web.com
caratherapeutics.gcs-web.com
fabletics.gcs-web.com
fusionfuel.gcs-web.com
hearcom.gcs-web.com
hydrafacial.gcs-web.com
impelneuropharma.gcs-web.com
intercure.gcs-web.com
investor.pdl.com
investorday.avid.com
investorday.veritone.com
investorday.whitemountains.com
investors.1stdibs.com
investors.fabletics.com
investors.hear.com
investors.honest.com
investors.hydrafacial.com
investors.impelnp.com
investors.knowbe4.com
investors.latch.com
investors.lee.net
investors.orphazyme.com
investors.paycor.com
investors.thetoppscompany.com
investors.vaccitech.co.uk
investors.werewolftx.com
investors.zymergen.com
ir.achillestx.com
ir.aterian.io
ir.aveanna.com
ir.blueprintmedicines.com
ir.calwatergroup.com
ir.caratherapeutics.com
ir.fusion-fuel.eu
ir.kiromic.com
ir.priviahealth.com
ir.saniona.com
ir.semlerscientific.com
ir.soulapp.cn
ir.talaristx.com
ir.taskus.com
ir.tscan.com
ir.veratx.com
ir.xenex.com
kiromic.gcs-web.com
knowbe4.gcs-web.com
latch.gcs-web.com
leapfrog-ssl-43.gcs-web.com
lee.gcs-web.com
mudrickcapital.gcs-web.com
news.saniona.com
orphazyme.gcs-web.com
paycor.gcs-web.com
pdl.gcs-web.com
priviahealth.gcs-web.com
saniona.gcs-web.com
sanionapr.gcs-web.com
semlerscientific.gcs-web.com
soulapp.gcs-web.com
talaristherapeutics.gcs-web.com
taskus.gcs-web.com
thehonestcompany.gcs-web.com
thetoppscompany.gcs-web.com
tscan.gcs-web.com
vaccitech.gcs-web.com
veratherapeutics.gcs-web.com
veritone.gcs-web.com
voltalia.gcs-web.com
werewolftx.gcs-web.com
whitemountainsinvestorday.gcs-web.com
www.intercure.co
www.mudrickcapitalacquisitioncorp.com
www.voltalia.com
xenex.gcs-web.com
zymergen.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-43.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq0lz+ZuJ70eaJ6dX6JD
NLL3k4zlopw/zeyiNOyKHEFETFFW7p5sIq0tvABAAbwI9YZQkgQuZu8/Ig6j5j7s
Srcrv2hn+WrcFPbVNTwLgXS7LskviTd2xrH0xvrqFcbh+aKAiuW7aIA2tZFjM1bq
9rjQctV+iLp6DYEa9bJJ/5AysNCQPoPx8YSwIPQrz0ssGX6PPfYJCngICvaT5mbK
vwLfILhD+3lKwPReixi9CkYR0iLGLl9ILq8PhjEiyOPW3/ALUlxOYZ3rWeOQo3JV
6lM2dyJmnz37NP1RztDBYynC68T1ZcAADG9onHGu6b1VRjI7H2xC+uqKlrMoV6K9
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401786079079452821215935158158167264048688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 14:13:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 14:13:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22555800598823392174105039488903013350032992617947079465695907607070337267274114225021727237261751496735928827940461474057869276322964187719798582317121843170371425268299568556148705758416782991507715664683510795207702599341674706250260703672927627987528152641349126971812726696247858560547164640646682970181952195595788550430851368301544334799484804636854647386935943712774475988176251159730501600668134930555180156186780591077967238408256080938887992174286174226345689198758341185932354166158395747496912227721498307932315526845083030489061001002546989475276750519430963161008827396653869001875071233472131198270859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2b106d99988d318c63dab9fa2f98a9d4ba5d570
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1883 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdibs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achillestherapeuticsuklimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aterian.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveanna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprintmedicines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calwatergroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabletics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionfuel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearcom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrafacial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impelneuropharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.pdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.avid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.veritone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.whitemountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.1stdibs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fabletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.honest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hydrafacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.impelnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.knowbe4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.latch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.lee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.orphazyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.paycor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thetoppscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vaccitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.werewolftx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.zymergen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.achillestx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aterian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aveanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.blueprintmedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.calwatergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fusion-fuel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kiromic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.priviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.semlerscientific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.soulapp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.talaristx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.taskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tscan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.veratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xenex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiromic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowbe4.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latch.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-43.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lee.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudrickcapital.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.saniona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orphazyme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paycor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdl.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priviahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saniona.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanionapr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semlerscientific.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talaristherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taskus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehonestcompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetoppscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscan.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccitech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voltalia.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werewolftx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitemountainsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intercure.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mudrickcapitalacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymergen.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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