leapfrog-ssl-37.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:e2:ab:7f:88:3e:fe:09:e0:70:ea:c3:56:05:1e:5c:92 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-37.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:e2:ab:7f:88:3e:fe:09:e0:70:ea:c3:56:05:1e:5c:92
Serial Number (int): 313020791196813193315752708153173608389778
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:05:33:43:e0:a0:39:10:c3:d4:bf:1c:c8:dd:84:cd:81:0f:1c:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:df:e5:ad:11:7b:0c:5a:76:a1:28:3e:29:8e:8f:0b:ce:26:69:89
Fingerprint (sha256): 68:54:a5:a2:73:47:f6:58:27:cc:46:5b:e1:75:65:b2:3b:2b:c7:bd:96:8f:93:d5:47:0f:e7:8b:a6:1f:98:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-37.gcs-web.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-37.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagesolutions.gcs-web.com
allegromicro.gcs-web.com
americanstateswatercompany.gcs-web.com
aquabounty.gcs-web.com
ateapharma.gcs-web.com
avadelpharmaceuticalsplc.gcs-web.com
bassettfurniture.gcs-web.com
biodesix.gcs-web.com
brinker.gcs-web.com
cabotog.gcs-web.com
chinatechfaithwirelesscommunicationtechnologyltd.gcs-web.com
cimpress.gcs-web.com
clearone.gcs-web.com
drhc.gcs-web.com
edgio.gcs-web.com
emcorecorporation.gcs-web.com
eyenoviabio.gcs-web.com
falconminerals.gcs-web.com
fibrogen.gcs-web.com
galecto.gcs-web.com
greenrosecorp.gcs-web.com
icc.gcs-web.com
icfinternational.gcs-web.com
in8bio.gcs-web.com
integralifesciences.gcs-web.com
investor-dk.tcmgroup.dk
investor-en.tcmgroup.dk
investor.cabot-corp.com
investor.coopercos.com
investor.drhc.com
investor.emcore.com
investor.fibrogen.com
investor.icf.com
investor.integralife.com
investor.lordstownmotors.com
investors.allegromicro.com
investors.aquabounty.com
investors.avadel.com
investors.bassettfurniture.com
investors.biodesix.com
investors.brinker.com
investors.clearone.com
investors.edg.io
investors.in8bio.com
investors.koss.com
investors.nxt-id.com
investors.satellogic.com
investors.soterahealth.com
investors.teradyne.com
ir.advantagesolutions.net
ir.ateapharma.com
ir.cimpress.com
ir.eyenovia.com
ir.galecto.com
ir.iccholdingsinc.com
ir.joinroot.com
ir.kalvista.com
ir.krystalbio.com
ir.mediwound.com
ir.mind-technology.com
ir.nucana.com
ir.p10alts.com
ir.p10industries.com
ir.rocketpharma.com
ir.sigilon.com
ir.sigmalithiumresources.com
ir.tabularasahealthcare.com
ir.techfaithwireless.com
ir.vaccinex.com
jaysheadphones.gcs-web.com
joinroot.gcs-web.com
kalvista.gcs-web.com
kosscorporation.gcs-web.com
krystalbio.gcs-web.com
leapfrog-ssl-37.gcs-web.com
lordstownmotors.gcs-web.com
mediwound.gcs-web.com
mitchamindustriesinc.gcs-web.com
moleculartemplates.gcs-web.com
nucana.gcs-web.com
nxtid.gcs-web.com
p10industries.gcs-web.com
redfin.gcs-web.com
rocketpharmaceuticals.gcs-web.com
satellogic.gcs-web.com
sigilon.gcs-web.com
sigmalithiumresources.gcs-web.com
soterahealth.gcs-web.com
tabularasahealthcareinc.gcs-web.com
tcmgroupas.gcs-web.com
teradyne.gcs-web.com
thecoopercompaniesinc.gcs-web.com
vaccinex.gcs-web.com
www.aswater.com
www.greenroseholdings.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-37.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+VorXW/Z9zth/JFuasi
yBEmpOPoogeSCgKd7zj4JhGxh0dW2/hAvyi1LLDilYs3rLakJmjvAF+a9U0gEu/O
ubZFPHX/IV4Advx8M+eaRD7if1mdnFqHywbc9BStAkqCdkuoSAP4wV/zj7qZ3ZOt
19defpPhTQq/jxEZkPA0pPnU/uAcGRqaI5IBS6d7Tf7/sOnDGnAGTrjTlK48LJUj
cMsempeYFh3DTFHFnflg9fkV7n0KpUgTM1Wf0AZRkY2Ic9KAFoHPLKoYMCLNOKPh
w75gTMSW3mCUk8s6IBE64K99O/txxoHMmhz3gnj3GqE0QKi0JqZZOHqace6Q57HB
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313020791196813193315752708153173608389778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 19:52:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 19:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-37.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23719688771913718876327808652459127543752607322791870244262908822814218882172339657204961949352650719816583261805010754037480793475995371487695703250395105336751478646315325495333592645361181111629755423954130730032310696296593606099542867076430556163611831491121091791651311152620932474888018712089878024659381921144135705911427593067065481500890725781182640411874737105775162896908821084691294678209361076922124347846777280320747248971315908530567543225951517962699896956684628282502975143145466530011699497091738195917118757534079779846725397116859414348054477440834945619289400913331869588979162538000482099642663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb053343e0a03910c3d4bf1cc8dd84cd810f1c39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagesolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegromicro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanstateswatercompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquabounty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avadelpharmaceuticalsplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassettfurniture.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodesix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabotog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinatechfaithwirelesscommunicationtechnologyltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimpress.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcorecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyenoviabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconminerals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibrogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galecto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenrosecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icfinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in8bio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-dk.tcmgroup.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-en.tcmgroup.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cabot-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.coopercos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.drhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.emcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fibrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.icf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.integralife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lordstownmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.allegromicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aquabounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avadel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bassettfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biodesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brinker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clearone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.edg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.in8bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.koss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nxt-id.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.satellogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.soterahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.teradyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advantagesolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ateapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eyenovia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.galecto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iccholdingsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.joinroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kalvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.krystalbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mediwound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mind-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nucana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.p10alts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.p10industries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rocketpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sigilon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sigmalithiumresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tabularasahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.techfaithwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vaccinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaysheadphones.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinroot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalvista.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krystalbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-37.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordstownmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediwound.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchamindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moleculartemplates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxtid.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p10industries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satellogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigilon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmalithiumresources.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soterahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabularasahealthcareinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcmgroupas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teradyne.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoopercompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenroseholdings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018835c9803400000403004730450221008609eb1fd959754c143ac18186a5fc63bc0c0b3b00dc7feab97c5047f7914e9d022067e0cd8cdb1ccb2989a2e62440520f8830eb91b5a8930af3a93551d23fc9d7ba0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018835c980450000040300483046022100d8184567923b0754ef379728fce1a170e87811087aeed2b972b042a0babd03690221008864c6fdb993b06157bb39d9dbe6644fd8d71bc71c88c2d2f955b7844791f0c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008faf5bdf9750dbe3252e3866989de2f0ce8a20fb0f3eefa4728f572cdba2fa386f4b0505d49206da84079a1471557bbc0419eb98793d691ca1a9538ca126e7eccc1406682ae47f3971dc47597f5c24f68b654af0f5782f21b1bf7e5576d6087976672823b6d484b28db5d551f64c25fb807f9d8a6b60fa26b6b3de5e51e3b9f26a7edd3973ea41ce65dd66c872146ba95763582152808cb2ce01c92c456079873011c6dd4ebac0037e1ad5233d942a96fcfd1f308a484d76ec13623f092ce70515a8bd3622dc3d0d15c29e73133e3fc76de88c1bd30be057d9903db7dd8853a86fd05e5d8e543f02676a66c93ac8ef1c0b64d40233e9f097c54b21c49861033c