leapfrog-ssl-55.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:7d:dd:ac:0c:54:6d:d1:82:3c:5e:bf:e9:9a:92:8f:c3 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-55.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:7d:dd:ac:0c:54:6d:d1:82:3c:5e:bf:e9:9a:92:8f:c3
Serial Number (int): 322074423593837956398746097477717421363139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:0a:d6:6e:32:1c:1c:0c:e6:4d:3b:16:ac:42:63:c9:1b:d5:c3:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:43:64:87:8d:f9:ff:18:53:0b:03:b7:8f:65:fa:74:55:c1:ef:f9
Fingerprint (sha256): 73:4e:49:59:7b:99:36:68:0a:b7:b9:0a:bc:1a:09:57:5c:2a:e5:b9:68:75:35:c5:fc:89:69:c0:af:63:a0:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-55.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-55.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2023investorday.zailaboratory.com
60degreespharma.gcs-web.com
abacuslife.gcs-web.com
acelyrin.gcs-web.com
acurapharm.gcs-web.com
admabiologics.gcs-web.com
aerwins.gcs-web.com
altamiratherapeutics.gcs-web.com
apogeetherapeutics.gcs-web.com
asiainnovations.gcs-web.com
atossatherapeutics.gcs-web.com
beneficient.gcs-web.com
bionano.gcs-web.com
cmegroupinc.gcs-web.com
cocacolahbc.gcs-web.com
completesolaria.gcs-web.com
denalitherapeutics.gcs-web.com
digitalmediasolutions.gcs-web.com
donegalgroup.gcs-web.com
drillingtools.gcs-web.com
evolutionpetroleum.gcs-web.com
fiverrinternationalltd.gcs-web.com
fortrea.gcs-web.com
genkoreanbbq.gcs-web.com
geogroup.gcs-web.com
hanoverbank.gcs-web.com
investor-day.coca-colahellenic.com
investor.cmegroup.com
investor.genkoreanbbq.com
investor.rgare.com
investorday2023.lunainc.com
investors.60degreespharma.com
investors.acelyrin.com
investors.acurapharm.com
investors.aerwins.us
investors.apogeetherapeutics.com
investors.atossatherapeutics.com
investors.completesolaria.com
investors.denalitherapeutics.com
investors.digitalmediasolutions.com
investors.donegalgroup.com
investors.drillingtools.com
investors.fiverr.com
investors.fortrea.com
investors.geogroup.com
investors.kneat.com
investors.oildri.com
investors.pinelabs.com
investors.rexamerican.com
investors.rfindustries.com
investors.sealsq.com
investors.sprucebio.com
investors.sprucebiosciences.com
investors.tigoenergy.com
investors.unifiedpostgroup.com
investorsday.upbound.com
ir.abacuslife.com
ir.abacuslifesettlements.com
ir.admabiologics.com
ir.altamiratherapeutics.com
ir.asiainnovations.com
ir.bionano.com
ir.evolutionpetroleum.com
ir.fortrea.com
ir.hanoverbank.com
ir.kimbrx.com
ir.moatable.com
ir.opthea.com
ir.suncartech.com
ir.truxtontrust.com
ir.turnstonebio.com
kimbrxtherapeutics.gcs-web.com
kneat.gcs-web.com
leapfrog-ssl-55.gcs-web.com
lunainnovationsincinvestorday.gcs-web.com
moatable.gcs-web.com
oddity.gcs-web.com
oildri.gcs-web.com
opthealimited.gcs-web.com
pinelabs.gcs-web.com
reinsurancegroupofamericainc.gcs-web.com
rexamerican.gcs-web.com
rfindustries.gcs-web.com
sealsemiconductors.gcs-web.com
shareholders.trustben.com
sprucebiosciences.gcs-web.com
suncar.gcs-web.com
tigoenergy.gcs-web.com
truxtontrust.gcs-web.com
turnstonebio.gcs-web.com
unifiedpost.gcs-web.com
upboundinvestorday.gcs-web.com
www.investors.unifiedpostgroup.com
zailabranddday2023.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-52.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-55.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINrjCCDJagAwIBAgISA7J93awMVG3Rgjxev+mako/DMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDUxODE0MzBaFw0yNDA0MDQxODE0MjlaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC01NS5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALclgK7EEWnNxtjsOyrwkkd2ecWIte9w4JfItFRydr6zfgz1
0+DJcXvQ82pebby5zh51RDjfMYzlVY2Uwi2qt2zXaxD58IK4VAJfMqBPf0cvYUbE
voDvcQOChiCIEBnRb4LWGiajvNLJ2j2HtyhmTXO1lCmv6QPPbk7nlJfpgKJLx0Qm
mkrIow9Bc9bZXlONO2OPciCTIBCerw0LhxvLpf1E2Yty1X8Muy6YBrsY245LNbxO
Mzczg0T4WTWnrb7XVzTxMmqgx7PheTBHd+gQLwzM4bZ5CfHIsULBx5YhD8orARns
Ejy9yy923xPP3oJQvriMaHhQkkQIiKll66Xb/cECAwEAAaOCCsgwggrEMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUQgrWbjIcHAzmTTsWrEJjyRvVw7wwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggnCBgNVHREEggm5MIIJtYIhMjAyM2ludmVzdG9yZGF5
LnphaWxhYm9yYXRvcnkuY29tghs2MGRlZ3JlZXNwaGFybWEuZ2NzLXdlYi5jb22C
FmFiYWN1c2xpZmUuZ2NzLXdlYi5jb22CFGFjZWx5cmluLmdjcy13ZWIuY29tghZh
Y3VyYXBoYXJtLmdjcy13ZWIuY29tghlhZG1hYmlvbG9naWNzLmdjcy13ZWIuY29t
ghNhZXJ3aW5zLmdjcy13ZWIuY29tgiBhbHRhbWlyYXRoZXJhcGV1dGljcy5nY3Mt
d2ViLmNvbYIeYXBvZ2VldGhlcmFwZXV0aWNzLmdjcy13ZWIuY29tghthc2lhaW5u
b3ZhdGlvbnMuZ2NzLXdlYi5jb22CHmF0b3NzYXRoZXJhcGV1dGljcy5nY3Mtd2Vi
LmNvbYIXYmVuZWZpY2llbnQuZ2NzLXdlYi5jb22CE2Jpb25hbm8uZ2NzLXdlYi5j
b22CF2NtZWdyb3VwaW5jLmdjcy13ZWIuY29tghdjb2NhY29sYWhiYy5nY3Mtd2Vi
LmNvbYIbY29tcGxldGVzb2xhcmlhLmdjcy13ZWIuY29tgh5kZW5hbGl0aGVyYXBl
dXRpY3MuZ2NzLXdlYi5jb22CIWRpZ2l0YWxtZWRpYXNvbHV0aW9ucy5nY3Mtd2Vi
LmNvbYIYZG9uZWdhbGdyb3VwLmdjcy13ZWIuY29tghlkcmlsbGluZ3Rvb2xzLmdj
cy13ZWIuY29tgh5ldm9sdXRpb25wZXRyb2xldW0uZ2NzLXdlYi5jb22CImZpdmVy
cmludGVybmF0aW9uYWxsdGQuZ2NzLXdlYi5jb22CE2ZvcnRyZWEuZ2NzLXdlYi5j
b22CGGdlbmtvcmVhbmJicS5nY3Mtd2ViLmNvbYIUZ2VvZ3JvdXAuZ2NzLXdlYi5j
b22CF2hhbm92ZXJiYW5rLmdjcy13ZWIuY29tgiJpbnZlc3Rvci1kYXkuY29jYS1j
b2xhaGVsbGVuaWMuY29tghVpbnZlc3Rvci5jbWVncm91cC5jb22CGWludmVzdG9y
LmdlbmtvcmVhbmJicS5jb22CEmludmVzdG9yLnJnYXJlLmNvbYIbaW52ZXN0b3Jk
YXkyMDIzLmx1bmFpbmMuY29tgh1pbnZlc3RvcnMuNjBkZWdyZWVzcGhhcm1hLmNv
bYIWaW52ZXN0b3JzLmFjZWx5cmluLmNvbYIYaW52ZXN0b3JzLmFjdXJhcGhhcm0u
Y29tghRpbnZlc3RvcnMuYWVyd2lucy51c4IgaW52ZXN0b3JzLmFwb2dlZXRoZXJh
cGV1dGljcy5jb22CIGludmVzdG9ycy5hdG9zc2F0aGVyYXBldXRpY3MuY29tgh1p
bnZlc3RvcnMuY29tcGxldGVzb2xhcmlhLmNvbYIgaW52ZXN0b3JzLmRlbmFsaXRo
ZXJhcGV1dGljcy5jb22CI2ludmVzdG9ycy5kaWdpdGFsbWVkaWFzb2x1dGlvbnMu
Y29tghppbnZlc3RvcnMuZG9uZWdhbGdyb3VwLmNvbYIbaW52ZXN0b3JzLmRyaWxs
aW5ndG9vbHMuY29tghRpbnZlc3RvcnMuZml2ZXJyLmNvbYIVaW52ZXN0b3JzLmZv
cnRyZWEuY29tghZpbnZlc3RvcnMuZ2VvZ3JvdXAuY29tghNpbnZlc3RvcnMua25l
YXQuY29tghRpbnZlc3RvcnMub2lsZHJpLmNvbYIWaW52ZXN0b3JzLnBpbmVsYWJz
LmNvbYIZaW52ZXN0b3JzLnJleGFtZXJpY2FuLmNvbYIaaW52ZXN0b3JzLnJmaW5k
dXN0cmllcy5jb22CFGludmVzdG9ycy5zZWFsc3EuY29tghdpbnZlc3RvcnMuc3By
dWNlYmlvLmNvbYIfaW52ZXN0b3JzLnNwcnVjZWJpb3NjaWVuY2VzLmNvbYIYaW52
ZXN0b3JzLnRpZ29lbmVyZ3kuY29tgh5pbnZlc3RvcnMudW5pZmllZHBvc3Rncm91
cC5jb22CGGludmVzdG9yc2RheS51cGJvdW5kLmNvbYIRaXIuYWJhY3VzbGlmZS5j
b22CHGlyLmFiYWN1c2xpZmVzZXR0bGVtZW50cy5jb22CFGlyLmFkbWFiaW9sb2dp
Y3MuY29tghtpci5hbHRhbWlyYXRoZXJhcGV1dGljcy5jb22CFmlyLmFzaWFpbm5v
dmF0aW9ucy5jb22CDmlyLmJpb25hbm8uY29tghlpci5ldm9sdXRpb25wZXRyb2xl
dW0uY29tgg5pci5mb3J0cmVhLmNvbYISaXIuaGFub3ZlcmJhbmsuY29tgg1pci5r
aW1icnguY29tgg9pci5tb2F0YWJsZS5jb22CDWlyLm9wdGhlYS5jb22CEWlyLnN1
bmNhcnRlY2guY29tghNpci50cnV4dG9udHJ1c3QuY29tghNpci50dXJuc3RvbmVi
aW8uY29tgh5raW1icnh0aGVyYXBldXRpY3MuZ2NzLXdlYi5jb22CEWtuZWF0Lmdj
cy13ZWIuY29tghtsZWFwZnJvZy1zc2wtNTUuZ2NzLXdlYi5jb22CKWx1bmFpbm5v
dmF0aW9uc2luY2ludmVzdG9yZGF5Lmdjcy13ZWIuY29tghRtb2F0YWJsZS5nY3Mt
d2ViLmNvbYISb2RkaXR5Lmdjcy13ZWIuY29tghJvaWxkcmkuZ2NzLXdlYi5jb22C
GW9wdGhlYWxpbWl0ZWQuZ2NzLXdlYi5jb22CFHBpbmVsYWJzLmdjcy13ZWIuY29t
gihyZWluc3VyYW5jZWdyb3Vwb2ZhbWVyaWNhaW5jLmdjcy13ZWIuY29tghdyZXhh
bWVyaWNhbi5nY3Mtd2ViLmNvbYIYcmZpbmR1c3RyaWVzLmdjcy13ZWIuY29tgh5z
ZWFsc2VtaWNvbmR1Y3RvcnMuZ2NzLXdlYi5jb22CGXNoYXJlaG9sZGVycy50cnVz
dGJlbi5jb22CHXNwcnVjZWJpb3NjaWVuY2VzLmdjcy13ZWIuY29tghJzdW5jYXIu
Z2NzLXdlYi5jb22CFnRpZ29lbmVyZ3kuZ2NzLXdlYi5jb22CGHRydXh0b250cnVz
dC5nY3Mtd2ViLmNvbYIYdHVybnN0b25lYmlvLmdjcy13ZWIuY29tghd1bmlmaWVk
cG9zdC5nY3Mtd2ViLmNvbYIedXBib3VuZGludmVzdG9yZGF5Lmdjcy13ZWIuY29t
giJ3d3cuaW52ZXN0b3JzLnVuaWZpZWRwb3N0Z3JvdXAuY29tgh56YWlsYWJyYW5k
ZGRheTIwMjMuZ2NzLXdlYi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHinj1VAsw9iJG1jBERm
Q++O64zRO5UP4jmqP96q+mhwFb9FXxgZBeZWbKOsJS/eKblHuYxjLXYdzB8Vh1dF
WX8esgDAkgh9JrVzFCfBkjdflLeQBCWMvsOUY9dIEuBgRw6qdzUiehKmlVaqfcKu
lj4plPWU+1GPXiDlfSukUXCFGZbFS66pfC7exnPH9D1Kzs6NVk1pLERHccxqmxe7
JaKFyHb4viorz7JP0/zywVZSQTQu4mP8/M+cY8mlhGeZpoXmckrDps5QQhVQTWnS
nFc6JcEQKLCJ8fSPUhqvhX8P1Bk4EQTy19JdwjSLRX6Tu/3hhh0hOzlDQMqz0bSX
yWc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyWArsQRac3G2Ow7KvCS
R3Z5xYi173Dgl8i0VHJ2vrN+DPXT4Mlxe9Dzal5tvLnOHnVEON8xjOVVjZTCLaq3
bNdrEPnwgrhUAl8yoE9/Ry9hRsS+gO9xA4KGIIgQGdFvgtYaJqO80snaPYe3KGZN
c7WUKa/pA89uTueUl+mAokvHRCaaSsijD0Fz1tleU407Y49yIJMgEJ6vDQuHG8ul
/UTZi3LVfwy7LpgGuxjbjks1vE4zNzODRPhZNaetvtdXNPEyaqDHs+F5MEd36BAv
DMzhtnkJ8cixQsHHliEPyisBGewSPL3LL3bfE8/eglC+uIxoeFCSRAiIqWXrpdv9
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322074423593837956398746097477717421363139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 18:14:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 18:14:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-55.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23120103062999342690794553139965925573110291248331976509463111387632370633283695451013996845542046568930318080034711633803158209395931356659927772544639880136720425682375618601358398027028234969033511769916548846559120845130915577549111577578653955590724934487600529218089994810585993886081777201504916081903757689399443193943629864087155306418037244328148056534696753317159754808908733554073693537170506870522017988984562028201306905891881101824165889341566643776358925192318914508429126428289737692238644285564655476203222146647921335004947464994570512076468772855398264964024419726976586393840055387187766865165761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							420ad66e321c1c0ce64d3b16ac4263c91bd5c3bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2023investorday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '60degreespharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacuslife.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acelyrin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurapharm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admabiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerwins.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altamiratherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apogeetherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiainnovations.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atossatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficient.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionano.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolahbc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completesolaria.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denalitherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmediasolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donegalgroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drillingtools.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolutionpetroleum.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiverrinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortrea.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genkoreanbbq.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geogroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanoverbank.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-day.coca-colahellenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cmegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.genkoreanbbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.rgare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2023.lunainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.60degreespharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acelyrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.acurapharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerwins.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.apogeetherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.atossatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.completesolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.denalitherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.digitalmediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.donegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.drillingtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fiverr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fortrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.geogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.kneat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oildri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pinelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rexamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rfindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sealsq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sprucebiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tigoenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.unifiedpostgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorsday.upbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.abacuslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.abacuslifesettlements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.admabiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.altamiratherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.asiainnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.bionano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.evolutionpetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.fortrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.hanoverbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kimbrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.moatable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.opthea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.suncartech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.truxtontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.turnstonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimbrxtherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kneat.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-55.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunainnovationsincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moatable.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oildri.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthealimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinelabs.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reinsurancegroupofamericainc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexamerican.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfindustries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealsemiconductors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.trustben.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprucebiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigoenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truxtontrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnstonebio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifiedpost.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upboundinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors.unifiedpostgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday2023.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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