leapfrog-ssl-48.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:63:56:0f:98:83:7f:30:a7:ae:fd:28:d0:37:a3:4a:8d:3d was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-48.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:56:0f:98:83:7f:30:a7:ae:fd:28:d0:37:a3:4a:8d:3d
Serial Number (int): 382251492637648787717826202668453893672253
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:2d:52:09:16:05:f1:40:7a:a7:ec:a9:ea:1c:d8:19:d1:7a:39:58
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:9d:f3:d8:d5:5a:2f:8b:8b:9a:1d:d6:48:17:d9:c9:fc:bd:d4:25
Fingerprint (sha256): 68:17:9e:58:19:7f:62:1b:75:ab:b7:fd:de:24:cd:91:a8:74:73:bd:4e:61:90:6f:7f:f2:03:a9:a4:1c:35:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-48.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-48.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

algoma.gcs-web.com
apoginvestorday.gcs-web.com
arenagroup.gcs-web.com
aurabiosciences.gcs-web.com
bionanogenomics.gcs-web.com
brightspringhealth.gcs-web.com
brilliantearth.gcs-web.com
crainternationalinc.gcs-web.com
demedredging.gcs-web.com
effectortherapeutics.gcs-web.com
elitebodysculpture.gcs-web.com
embarktrucks.gcs-web.com
ensemblehp.gcs-web.com
firstlight.gcs-web.com
fluenceenergy.gcs-web.com
fpcanadainvestorday.gcs-web.com
homesmart.gcs-web.com
icims.gcs-web.com
investor.minktherapeutics.com
investor.rbcbearings.com
investor.sarcos.com
investor.sterlingcheck.com
investorday.apog.com
investorday.o-i.com
investorrelations.brightspringhealth.com
investors.brilliantearth.com
investors.deme-group.com
investors.effector.com
investors.elitebodysculpture.com
investors.embarktrucks.com
investors.ensemblehp.com
investors.homesmart.com
investors.icims.com
investors.mimedx.com
investors.redbox.com
investors.renttherunway.com
investors.runwaygrowth.com
investors.sonder.com
investors.sportradar.com
investors.thearenagroup.net
investors.thevitacococompany.com
investorupdate.mondelezinternational.com
ir.algoma.com
ir.aurabiosciences.com
ir.bionanogenomics.com
ir.brightspringhealth.com
ir.crai.com
ir.firstlightacquisition.com
ir.fluenceenergy.com
ir.jaspertherapeutics.com
ir.jhdtechnologies.com
ir.navitassemi.com
ir.nfigroup.com
ir.onkosxceltx.com
ir.onwd.com
ir.pyxisoncology.com
ir.sab.bio
ir.sabbiotherapeutics.com
ir.sovosbrands.com
ir.tjh.com
ir.zymeworks.com
jaspertherapeutics.gcs-web.com
jihuiduo.gcs-web.com
latamairlines.gcs-web.com
leapfrog-ssl-48.gcs-web.com
mimedx.gcs-web.com
minktherapeutics.gcs-web.com
mondelezinternationalinvestorday.gcs-web.com
navitassemi.gcs-web.com
nfigroup.com
nfigroup.gcs-web.com
oiinvestorday.gcs-web.com
onkosxcel.gcs-web.com
onwd.gcs-web.com
pyxisoncology.gcs-web.com
rbccm.gcs-web.com
redbox.gcs-web.com
renttherunway.gcs-web.com
runwaygrowthfinance.gcs-web.com
sabbiotherapeutics.gcs-web.com
sarcos.gcs-web.com
scandinaviantobaccogroup.gcs-web.com
sonder.gcs-web.com
sovosbrands.gcs-web.com
sportradar.gcs-web.com
sterlingcheck.gcs-web.com
tjh.gcs-web.com
trcgrunwaygrowthcreditfund.gcs-web.com
vitacoco.gcs-web.com
www.latamairlinesgroup.net
www.nfigroup.com
yumchinainvestorday.gcs-web.com
zymeworks.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-48.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sfhxuQx4YvZKs2r8wsA
GPW43rW8zlqi02V4jxSmV66DSWz+z7Ghf53OhNkXpuuE+KA2MULnsVECD6SNn1rk
GHcvUbYyixjOyi84rBQIw7Bk9Q6uJNOvXLhGk17//tn5m/IEiEXQ+akhfGEc5Hps
xJvUlzXKfIN5+YGCUdYMKsGK93Wb1sdC/OKpYykdRuSJ5Y2+BuP8I+nH9ZcF29Tv
H5V8y2UNRrcmc8VlEUe3w2/3I/Ir5hdcJLELMXoqPMgQOt+mRBkywohnn1qk1SJ6
847eowDmhpUkNVxesvD0V7UKaB1oaIDx5eGFgA3SmYa3dx4TjGRpE5SEoUXUrzue
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382251492637648787717826202668453893672253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 19:44:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 19:44:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28628422381066524805914250295422426257632845601541422649930051393289181747928463393002755802424674996028001203579272038655428074609590332829668664863889963124722236775186581976220790124872259914886653953507465744550619184425176134280956779439880335171220171777132190748912928971895010395791529896704554409606148375386725558135581450337219278468529087621416146868047480441066892284236135258964948791670921133774009990352888824992832791717564162825395016034078469005784748420175513728718664383738621876132612894716116481350637057503190384963985628995167322759417052336802564686554733479566035203024887086541035269758563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e02d52091605f1407aa7eca9ea1cd819d17a3958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algoma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apoginvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenagroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurabiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionanogenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspringhealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brilliantearth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crainternationalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demedredging.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'effectortherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitebodysculpture.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embarktrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensemblehp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstlight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluenceenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpcanadainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesmart.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icims.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.minktherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rbcbearings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sarcos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sterlingcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.apog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.o-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorrelations.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brilliantearth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.deme-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.effector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.elitebodysculpture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.embarktrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.ensemblehp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.homesmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.icims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mimedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.redbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renttherunway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.runwaygrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sportradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thearenagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.thevitacococompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorupdate.mondelezinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.algoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aurabiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionanogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspringhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.crai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.firstlightacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fluenceenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jaspertherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.jhdtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.navitassemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.onkosxceltx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.onwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pyxisoncology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sab.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sabbiotherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sovosbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zymeworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspertherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jihuiduo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamairlines.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-48.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimedx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minktherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondelezinternationalinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navitassemi.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfigroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onkosxcel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyxisoncology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbccm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbox.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renttherunway.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwaygrowthfinance.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarcos.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandinaviantobaccogroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonder.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovosbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportradar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingcheck.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjh.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trcgrunwaygrowthcreditfund.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitacoco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latamairlinesgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yumchinainvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zymeworks.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b162ef2dd000004030048304602210095896f59ca0ab90f7c4d994b0ba08962fe707e3f65cf45fa637a7b30255d53bc022100bcde992c1a517fa7cbb22e473e9d13e69f270d91859201d0f3fbdbd0edce03ff00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b162ef30a0000040300483046022100a8806039bb9edb235b4214a0024d07a7dae450a16e2e1b221d797843a2d5ca51022100c7e99952d66557a577ce381fb17cc5dd65247b38cc432fb15fbb3eac0713e4cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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