leapfrog-ssl-39.gcs-web.com

Issued by R11

About this certificate

This digital certificate with serial number 04:2f:09:10:7e:99:b7:ae:c4:04:70:c6:a3:d4:e4:ad:5c:cb was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-39.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2f:09:10:7e:99:b7:ae:c4:04:70:c6:a3:d4:e4:ad:5c:cb
Serial Number (int): 364454463668799261129720975454584167029963
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:f9:54:8c:4c:f4:bb:3c:0f:c6:1c:42:36:09:ea:48:21:b3:e4:92
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 6d:dd:fb:b8:61:ac:c4:07:15:86:ba:a5:4c:3a:8e:03:52:23:87:bd
Fingerprint (sha256): 5e:d3:58:27:88:66:d3:1d:19:5b:34:82:5f:8e:e2:ea:5c:80:7d:f7:3f:1b:e8:52:dc:d7:45:ca:2d:e4:01:a6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-39.gcs-web.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-39.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

17education.gcs-web.com
4dmt.gcs-web.com
908devices.gcs-web.com
aarcorp.gcs-web.com
arn.gcs-web.com
authid.gcs-web.com
avisbudgetgroup.gcs-web.com
bellerophon.gcs-web.com
billtrust.gcs-web.com
cbiz.gcs-web.com
comtechtel.gcs-web.com
gamestop.gcs-web.com
hartehanksinc.gcs-web.com
hostessbrands.gcs-web.com
htandelimited.gcs-web.com
humanco.gcs-web.com
inspirato.gcs-web.com
investor.gamestop.com
investor.inspirato.com
investor.piedmontreit.com
investor.scholastic.com
investor.seer.bio
investor.tempursealy.com
investorcentre.htande.com.au
investorday.parsons.com
investors.aarcorp.com
investors.arn.com.au
investors.authid.ai
investors.bellerophon.com
investors.kempharm.com
investors.kinnate.com
investors.kosmosenergy.com
ir.4dmoleculartherapeutics.com
ir.4dmt.com
ir.avisbudgetgroup.com
ir.carlylesecuredlending.com
ir.cbiz.com
ir.cxapp.com
ir.humancospac.com
ir.lear.com
ir.memicmed.com
ir.nationalgeneral.com
ir.patria.com
ir.petco.com
ir.rangeresources.com
ir.ribontx.com
ir.stonecastle-financial.com
ir.tcgbdc.com
ir.ucloudlink.com
ir.upstart.com
ir.vorbio.com
ir.vtvtherapeutics.com
kempharm.gcs-web.com
kinnate.gcs-web.com
kinstechnology.gcs-web.com
kosmosenergyllc.gcs-web.com
leapfrog-ssl-39.gcs-web.com
lear.gcs-web.com
mammothenergy.gcs-web.com
memicmed.gcs-web.com
nationalgeneral.gcs-web.com
news.gamestop.com
parsonsinvestorday.gcs-web.com
patria.gcs-web.com
petco.gcs-web.com
phiopharma.gcs-web.com
piedmontofficerealty.gcs-web.com
rangeresources.gcs-web.com
revivapharma.gcs-web.com
ribontx.gcs-web.com
scholasticcorporation.gcs-web.com
seerinc.gcs-web.com
silverbacktx.gcs-web.com
tcgbdc.gcs-web.com
tempursealyinternationalinc.gcs-web.com
thesimplygoodfoodscompany.gcs-web.com
ucloudlink.gcs-web.com
upstartnetworkinc.gcs-web.com
vorbio.gcs-web.com
vtvtherapeuticsinc.gcs-web.com
www.chemed.com
www.kins-tech.com
www.thesimplygoodfoodscompany.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-39.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAmOZ/ddEn1uY/I8Unea
b0bzgIz5MlZjgoLxOj+cX7NfF9GZmIxTVYNoDRWOsxh1Kznpi9uveYISlQk8zbsa
i8dyMwmuHhxvlyctQI1b1muvX0hQ6ihlNDjFJ35N2EHlkMmy3vWlDFHgSZl2uq4h
bjlWUksc7DjWeXHxw/vHKkUxeAUnVyWBLfR9USrw7QGkhGzn68bcSEy+FZ1zaH1k
Sl0EGUYPyNyyFSMNjqhjorO/S3bSwFhMpcDSkyl2+AbgN0PCFTpI7uKJxwJazfJK
zkbpCe89twIb8mnQ/a8oSW7zjzwERhUQU6SeAN4BopWsNPm4gB7HnLj60G6+PcPO
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364454463668799261129720975454584167029963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 22:35:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-14 22:35:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24747420147639825330127590736738855940957704529313074906861847860567998576285698872518604166297554357061962043900973308331790440073157295716448628637483529362031852821025089190222022884729812117833066845216666684885547169080008631507115010717455273509378691853706468033528817083119552876762017031819461782475437648990127803831796593162110297282576540125416140516936149473316974300255925813446080514313075166961951017403717686950696695065970799529754710866770683099252469333323459177806762963180092897891982249135174389016067098458603857764756921128126141259106772037199647944560912289302786067198812031726451670896313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34f9548c4cf4bb3c0fc61c423609ea4821b3e492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '17education.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dmt.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '908devices.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arn.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authid.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avisbudgetgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellerophon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billtrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtechtel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestop.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartehanksinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostessbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htandelimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirato.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.inspirato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.piedmontreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.seer.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tempursealy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorcentre.htande.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.parsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aarcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.arn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.authid.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bellerophon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kempharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kinnate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kosmosenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmoleculartherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.4dmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avisbudgetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.carlylesecuredlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cxapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.humancospac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.memicmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nationalgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.patria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.petco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rangeresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ribontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.stonecastle-financial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tcgbdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ucloudlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.upstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vorbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vtvtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinnate.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinstechnology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosmosenergyllc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-39.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lear.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammothenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memicmed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeneral.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.gamestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsonsinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piedmontofficerealty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangeresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revivapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribontx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasticcorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seerinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverbacktx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcgbdc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempursealyinternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesimplygoodfoodscompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucloudlink.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstartnetworkinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vorbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtvtherapeuticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kins-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesimplygoodfoodscompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019023679a8e0000040300473045022100ee8d5dfcdef5fbfbf7a6c63cb73ec726aca0a54fa63eb26eedc8d34a008e26770220776a070554420db1b6c7fe471f48497553e9f38695dcc0fc025d4a3a322cd43d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019023679a980000040300473045022100f0e8671d7e558a433eb0b185a8c54866d5bb481862225944bda156758bdd4f2f0220700795f4a350383341dc37eb08d8e5ef09f5e3563336b6bb24c947421fea1bfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009353f56841774c0cd471d7d2e80df7f1995fcf6612b3af494c901944b37e4dd3dea5bcb29d3bf4e67a764b83b918469e9522dce3215ec1151cd73884a5d1efc54d97abe0fcee915b0e6b5cf1a8f56f2ee6fe9615c06b73f87426cadce97cac0fa3716bd7f3faea2c9a24ad42813ebbbe5a110a937c425fc11fd1476637f1764611e1c4aca4380fc9570566ec1d27bdf212ad08e000f89b7481d5c5b6a83d2bf988ec24da5ed3d0579904dc10d1583c2b3c574b40a2adfb3e61d382fc352343bc5a4e0ace57cadf1c3d2331a910acf3685eb3db86d1a2a6f77e25333ff29f9a4fda79a55c778e47492acf8a5df9a63c52967cff069c5e4aea1512890b270f227c