leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6c:bf:fd:aa:7b:36:a7:ee:87:f3:52:20:8f:59:34:83:ae was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6c:bf:fd:aa:7b:36:a7:ee:87:f3:52:20:8f:59:34:83:ae
Serial Number (int): 385454839010574080701266481333694098604974
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:43:7b:be:fb:64:f3:81:73:7b:cb:53:bc:ff:53:b3:3c:9e:84:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:42:83:5c:ae:18:63:25:98:38:14:a7:e8:7b:93:a5:33:7e:7e:fb
Fingerprint (sha256): 7e:81:8f:ce:ef:4f:18:54:ec:e3:e0:14:75:0c:66:55:bd:a6:ef:0e:eb:6b:fa:df:30:2d:4b:6d:7e:db:d3:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adamispharmaceuticals.gcs-web.com
aerovatetx.gcs-web.com
americanassetstrust.gcs-web.com
atour.gcs-web.com
brightspire.gcs-web.com
cavotecsa.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
corporate.partycity.com
dallasnewscorp.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
erasca.gcs-web.com
ghres.gcs-web.com
hcwbiologics.gcs-web.com
healthcareroyalty.gcs-web.com
highpeakenergy.gcs-web.com
intapp.gcs-web.com
integralads.gcs-web.com
intrepidpotashinc.gcs-web.com
investor.dallasnewscorp.com
investor.dallasnewscorporation.com
investor.ghres.com
investor.landmarkmlp.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.erasca.com
investors.hcwbiologics.com
investors.intapp.com
investors.integralads.com
investors.legalzoom.com
investors.molecularpartners.com
investors.originmaterials.com
investors.partycity.com
investors.prokidney.com
investors.pwpartners.com
investors.rover.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.52tt.com
ir.aerovatetx.com
ir.americanassetstrust.com
ir.brightspire.com
ir.cavotec.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.highpeakenergy.com
ir.lyell.com
ir.many-core.com
ir.monterosatx.com
ir.northann.com
ir.omegatherapeutics.com
ir.schwazze.com
ir.tempesttx.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
landmarkinfrastructurepartnerslp.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
molecularpartners.gcs-web.com
monterosatx.gcs-web.com
northann.gcs-web.com
omegatherapeutics.gcs-web.com
originmaterials.gcs-web.com
partycity.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
press.vimeo.com
prokidney.gcs-web.com
quwanholdinglimited.gcs-web.com
rover.gcs-web.com
scholarrockinvestorday.gcs-web.com
schwazze.gcs-web.com
secondsight.gcs-web.com
silverspikecap.gcs-web.com
ssic.silverspikecap.com
tempesttx.gcs-web.com
theratech.gcs-web.com
toromont.gcs-web.com
uscentury.gcs-web.com
vimeopr.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xcelbrands.gcs-web.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7OSjarpLn040m0lyKJo
uM/rMp1exzZ0p1rJF0QdRYsuhyXcFWWvhClVssGS364bsS2ZI5/ByLvsDx6V1PlQ
nWDK2MNy23Xv+riZxt6hFNaEHglUFb8FAl59vYPW4nGE0qr80d4wWYMwTfUxmWGU
J4Mc7iCNJrghJwM5AuLgUEObcXS45pMnmQyNTpRSJK0TSSCrGLyLT7WrGGYlCIAi
ZfTzkr8IW/G38NFfg0DIjA+GpAON1sfTdmn6/fx6acXKm5lv9DOYQiRs8wCBBp6a
abZjrv8whWuGR925m3TJvPDFIPVgDRyVIQNpHv4E4XAGyfBCD8LFvEBDUUKIngyj
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385454839010574080701266481333694098604974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 19:56:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 19:56:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25209973175583878332719508880484253519196942618650694529209737156033529653143440046903712272105381272418014140793514932470863992414397800680550822816447421346910842874444673923136527484081537225901860613251227467417333455246409535315389852824949347254371067699859403875276915092406938625598537547290431513341220596484156259904177015303070903474205203740998533093065505169847723062658203921445298015088224938567689940006930358302112926392532393557295439862469803618225924915099315068023759629913446968856974829583231103664852787194823351017113337642531895067245151402665516261093125270847190616562871667841172371186677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd437bbefb64f381737bcb53bcff53b33c9e8453
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamispharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovatetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanassetstrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavotecsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnewscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwbiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpeakenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ghres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.landmarkmlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.erasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hcwbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.integralads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molecularpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.originmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.prokidney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.52tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerovatetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.americanassetstrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cavotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.highpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monterosatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.northann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.schwazze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tempesttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landmarkinfrastructurepartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecularpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterosatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northann.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originmaterials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partycity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prokidney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rover.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwazze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspikecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssic.silverspikecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempesttx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toromont.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeopr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcelbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bca786ecd00000403004630440220255f6be4b5cb3f6c3422e0721eccfcc37c818f4858e7f49fafe41fd32acb2e060220319776a0a2cda44b77d03b39b6bb5b5ff9b4d1f460f1467ac66e8887ded2d3ee00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bca786ed10000040300473045022100f87e5880b0f9a8beb217e0c14c133d38e4c2047c97a22ea1b6ed8eeb0c582ed102201e632391ec688b71841d8e0926e35159004dc762118cf62dca52ad5eb045a1e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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