leapfrog-ssl-48.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:11:e7:55:db:ec:11:34:1a:e1:ce:f4:3f:a8:3c:f4:fb was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-48.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:11:e7:55:db:ec:11:34:1a:e1:ce:f4:3f:a8:3c:f4:fb
Serial Number (int): 391348519997010741259033944330823739962619
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:7f:4b:7e:9d:c1:b6:3b:df:15:93:3e:81:a0:61:07:99:cc:0f:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:61:aa:dd:1c:34:d2:78:dd:ed:ef:21:4a:6e:1c:9e:a2:63:d8:e1
Fingerprint (sha256): 54:8c:00:1e:00:b0:8a:b8:ff:98:d9:b3:9f:bd:cb:16:f9:aa:64:d7:13:a8:20:94:81:d3:c3:43:df:83:6d:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-48.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-48.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.yumchina.com
algoma.gcs-web.com
apoginvestorday.gcs-web.com
arenagroup.gcs-web.com
aurabiosciences.gcs-web.com
bionanogenomics.gcs-web.com
brightspringhealth.gcs-web.com
brilliantearth.gcs-web.com
candelamedical.gcs-web.com
crainternationalinc.gcs-web.com
dicemolecules.gcs-web.com
effectortherapeutics.gcs-web.com
elitebodysculpture.gcs-web.com
embarktrucks.gcs-web.com
ensemblehp.gcs-web.com
firstlight.gcs-web.com
fluenceenergy.gcs-web.com
fpcanadainvestorday.gcs-web.com
homesmart.gcs-web.com
icims.gcs-web.com
investor.minktherapeutics.com
investor.rbcbearings.com
investor.sarcos.com
investor.st-group.com
investor.sterlingcheck.com
investorday.apog.com
investorday.o-i.com
investorrelations.brightspringhealth.com
investors.brilliantearth.com
investors.candelamedical.com
investors.dicemolecules.com
investors.effector.com
investors.elitebodysculpture.com
investors.embarktrucks.com
investors.ensemblehp.com
investors.homesmart.com
investors.icims.com
investors.redbox.com
investors.renttherunway.com
investors.runwaygrowth.com
investors.sonder.com
investors.sportradar.com
investors.thearenagroup.net
investors.thevitacococompany.com
investorupdate.mondelezinternational.com
ir.algoma.com
ir.aurabiosciences.com
ir.bionanogenomics.com
ir.brightspringhealth.com
ir.crai.com
ir.firstlightacquisition.com
ir.fluenceenergy.com
ir.jaspertherapeutics.com
ir.jhdtechnologies.com
ir.minervasurgical.com
ir.navitassemi.com
ir.nfigroup.com
ir.onwd.com
ir.pyxisoncology.com
ir.sabbiotherapeutics.com
ir.sovosbrands.com
ir.tjh.com
ir.zymeworks.com
jaspertherapeutics.gcs-web.com
jihuiduo.gcs-web.com
latamairlines.gcs-web.com
leapfrog-ssl-48.gcs-web.com
minervasurgical.gcs-web.com
minktherapeutics.gcs-web.com
mondelezinternationalinvestorday.gcs-web.com
navitassemi.gcs-web.com
nexters.gcs-web.com
nfigroup.com
nfigroup.gcs-web.com
oiinvestorday.gcs-web.com
onwd.gcs-web.com
pyxisoncology.gcs-web.com
rbccm.gcs-web.com
redbox.gcs-web.com
renttherunway.gcs-web.com
runwaygrowthfinance.gcs-web.com
sabbiotherapeutics.gcs-web.com
sarcos.gcs-web.com
scandinaviantobaccogroup.gcs-web.com
sonder.gcs-web.com
sovosbrands.gcs-web.com
sportradar.gcs-web.com
sterlingcheck.gcs-web.com
tjh.gcs-web.com
trcgrunwaygrowthcreditfund.gcs-web.com
vitacoco.gcs-web.com
www.latamairlinesgroup.net
www.nfigroup.com
yumchinainvestorday.gcs-web.com
zymeworks.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-48.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkdQJSie5BGC0J5NCfE/
OqRhwDsHwotxpp0/DkDssdkPa0u2Z0ogGDu/fFRJYWcqGHFTk0XIfBWkw90TMbPV
4vT9U8f/Ao7ME+jYVCvbEmt8cUKPryPp7uT5+eGrlhadLB0dQPf+ZallcUvnDXSL
kHLxbK6v+zbeBInzLlnlwlOzysp+oS0N6LFYxqkF+XAyKeZkoq5RipaqoiKwEvo3
tU77lmujw1fyrm2LHXH7fh9XzQsQVk7PE9LPKJRuFbMUE79AKUYc9nrRoM64Pj35
h/6b0Aqu27gRJ7EOo/sDM8TnE5DQnvEDHkFfnxTLQ2ax27wCe1U9kUCsAJD0fzb4
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391348519997010741259033944330823739962619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 12:00:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 12:00:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21495677628212596468769858570971875567202694739766645542225213971887426717189334203674051916187986519367591504750761250336149717811371802919152592019221581703710483772610530478186595376142068324539049071434579236273419097608557574056198562903245769651750528259726877606712223456004299599756385088385541898856382996212712622721945268247504324588987717035459934508172407068254342764545985760190556768790196937351810994276292280120888113570811013081475741681679586847615386276198686439824739848227881726754565827417005456278380581340760586447332844602319555542520056247236659414399786928923860937671430121525431351310417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f7f4b7e9dc1b63bdf15933e81a0610799cc0f5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.yumchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algoma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenagroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionanogenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspringhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brilliantearth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candelamedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crainternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicemolecules.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectortherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitebodysculpture.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embarktrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblehp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstlight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluenceenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpcanadainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesmart.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icims.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.minktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rbcbearings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sarcos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.st-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sterlingcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.apog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.o-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brilliantearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.candelamedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.dicemolecules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.effector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.elitebodysculpture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.embarktrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ensemblehp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.homesmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.redbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renttherunway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.runwaygrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sportradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thearenagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thevitacococompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorupdate.mondelezinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aurabiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionanogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.firstlightacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fluenceenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jaspertherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jhdtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.minervasurgical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navitassemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.onwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyxisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sabbiotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sovosbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zymeworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspertherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jihuiduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamairlines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minervasurgical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minktherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondelezinternationalinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navitassemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexters.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyxisoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbccm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbox.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renttherunway.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwaygrowthfinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarcos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandinaviantobaccogroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonder.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovosbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportradar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingcheck.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trcgrunwaygrowthcreditfund.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitacoco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamairlinesgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumchinainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymeworks.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001808a02285900000403004730450220060c74629db33298327b7d64dfdebc6262c48a7340fbb267d7c6bda7c1918eda0221009bdf7ab5ddff5189bfc3b87ecc43ba7e772c0416b7e5ae84f0f489da865edb280077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001808a0228600000040300483046022100dabfb1c62cd91019582c4ce734b9d8fdeb8d15f595ba3a36dd00893bbadbf974022100a7e05edef5337890bc62992b6200fee8b0700c56dd655bb035733b0e3930586b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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