leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d3:9c:b5:7e:8c:cf:6e:f5:f8:64:c9:4b:69:7f:d4:7c:21 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d3:9c:b5:7e:8c:cf:6e:f5:f8:64:c9:4b:69:7f:d4:7c:21
Serial Number (int): 420457025087172594409783898070491772255265
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:41:9e:fb:32:31:d0:42:07:2f:20:bf:98:72:ab:0d:59:c1:fe:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:5c:3a:a2:ed:34:aa:5d:41:60:6a:34:2c:6a:de:ba:a7:47:86:83
Fingerprint (sha256): 7b:43:12:20:d2:ee:38:3e:6e:9e:6f:da:fa:bd:9c:06:0f:1a:da:2b:a4:08:67:2f:21:8c:c2:e2:50:d1:67:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021randdday.zailaboratory.com
aadibio.gcs-web.com
adagiotx.gcs-web.com
aerofarms.gcs-web.com
arteris.gcs-web.com
aumbiosciences.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
cellebrite.gcs-web.com
clarus.gcs-web.com
composecure.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
freshworks.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
haoxihealthtechnology.gcs-web.com
helbiz.gcs-web.com
htb.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.freshworks.com
investor.securitynational.com
investor.tremorinternational.com
investorday.saputo.com
investors.adagiotx.com
investors.aerofarms.com
investors.cellebrite.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.intuitymedical.com
investors.nexxen.com
investors.rallybio.com
investors.sabrestrategicacquisitioncorp.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.tremorinternational.com
investors.vividseats.com
investors.wcgclinical.com
ir.aadibio.com
ir.arteris.com
ir.aumbiosciences.com
ir.composecure.com
ir.doma.com
ir.freshworks.com
ir.gtec-tech.com
ir.haoximedia.com
ir.htb.com
ir.immuneering.com
ir.micromobility.com
ir.nalumed.com
ir.netease.com
ir.neuronetics.com
ir.portagebiotech.com
ir.procept-biorobotics.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
netease.gcs-web.com
neuroneticsinc.gcs-web.com
portagebiotech.gcs-web.com
proceptbiorobotics.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
sabrestrategicacquisitioncorp.gcs-web.com
saputoinvestorday.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
tremorinternationalltd.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
vividseats.gcs-web.com
waitr.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com
zailabranddday.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/UxjaFAlPopU1w8mqIr
K4TUvze/c7IUtYVW6R7e8baOTInABZ3bPDkmnDuNUeJHTMKu9iDET+eUKE1ORRd7
1feZmVr88T01m14YJZ8hdT3zkAMmMBkcOSR5uwqebiF3YjscOSR5ZxsCcHyscIY8
GcMFxB13qAsUbaD208QYPsD+fVQeEpC0GMiJIKg6s/YQsbqwwqqaSxEqK6E8KhOp
EzcSBzlvdc39QhXiflkA7K4dl60ZrAKkyZB6LwRLZr968OlTGnTPsvUCdf2RN3yw
kg/C7QjAoF4ySjdqrVNSQrGEVuMV82NH1lvSsmIr7XSmpqo6YIezzy7DrS1koWff
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420457025087172594409783898070491772255265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 23:11:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 23:11:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23222519263206408399182273034031319159878313651649840649863483870072570418694976059691333260913407533272190628275798587421663857750251943009517003138340136619837681138423223944543491287702079261906183280456035242023787408187175940289824184764033751609788574845428186034727719848921470619712901819643241266204536864346784842251678951943758527692132030023587230889321139947732842158088061059369228938178237868007469610231849959757320346296727929437701450408479173175870815471533697044849200196469799745290961841001138731669202705761868346642497221500499671872468466874269363475458843150160054223273134282084709250359177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be419efb3231d042072f20bf9872ab0d59c1fe98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021randdday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aumbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellebrite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composecure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haoxihealthtechnology.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htb.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.saputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cellebrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nexxen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabrestrategicacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vividseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aadibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arteris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aumbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.composecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.haoximedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.htb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.micromobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.netease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuronetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.procept-biorobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netease.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proceptbiorobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrestrategicacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saputoinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremorinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividseats.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f8e30c61b0000040300483046022100f288e582b0b0e3ff80ccde074f0e7458038fdd0079d7be38c2e7454fca718e3a022100bbee88671417718c27978335edcf7cd1adb78e92a7216c7f1f4dc92f11397e470076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f8e30c6f40000040300473045022100b0c271ab81651ccaf6acfb745f478f225156f3f512badf1a1b71c808045ba637022064079682314d6d6fcded47f176d55795bdc25afcb95c740cc940dbef675681d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00407b7d6898bc98cfde4f73ccd2acf530ef6b8aff7b8dd204a5b192f9df570fbac259a5fd58e9ba7f03de08e3d2210896b04a3b07822bdd38a6e9f39538ff12cffa1a8e1d07a33b80624421e0dec558028b2964bf0808ee440222c77725c1e5f833122e1301b1adbdb21882ecbe492e03394b71267e14099cb12df1938280dc0df6d21b8daec3c4a6c2ece65c6dafe152e5bc71a59602edc7c9525f368155666e2a28d602ed8abaf02cbdaeddae882cd37c81d96ae2857e216fda42daf1ded0b9139b4344ef5ab4ed318f151d5f4afe69ff506e80eb216414fed91fb4ac07a946c68f62aca77cf73d85d6071a8a35d5fccbd5f08c6ffcc5b1a4ee4dfa30f27e2c