leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:72:5d:aa:55:50:71:38:72:41:69:06:0a:b1:c7:0d:d3 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:72:5d:aa:55:50:71:38:72:41:69:06:0a:b1:c7:0d:d3
Serial Number (int): 412574247038073663976550441543643370556883
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:d6:33:64:6f:90:88:0e:9c:36:cf:7c:48:6a:bf:d2:e1:1a:f6:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:d3:31:10:2f:0e:d0:7d:d2:95:1a:0a:4f:52:25:b2:57:3b:ea:60
Fingerprint (sha256): 88:22:a0:a7:5d:be:52:1b:a1:63:fa:6f:fd:4d:1b:9b:c8:b9:77:af:f8:3d:74:6a:92:62:82:54:2b:47:a8:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.ctfjewellerygroup.com
2021randdday.zailaboratory.com
aadibio.gcs-web.com
adagiotx.gcs-web.com
aerofarms.gcs-web.com
agilethought.gcs-web.com
arteris.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
cellebrite.gcs-web.com
clarus.gcs-web.com
composecure.gcs-web.com
ctfjewellerygroup.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
freshworks.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.freshworks.com
investor.securitynational.com
investor.tremorinternational.com
investorday.saputo.com
investors.adagiotx.com
investors.aerofarms.com
investors.cellebrite.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.intuitymedical.com
investors.oceanbiomedical.com
investors.otonomo.io
investors.rallybio.com
investors.sabrestrategicacquisitioncorp.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.tremorinternational.com
investors.waitrapp.com
investors.wcgclinical.com
investors.xostrucks.com
ir.aadibio.com
ir.agilethought.com
ir.arteris.com
ir.composecure.com
ir.doma.com
ir.freshworks.com
ir.gtec-tech.com
ir.immuneering.com
ir.nalumed.com
ir.netease.com
ir.neuronetics.com
ir.portagebiotech.com
ir.procept-biorobotics.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
netease.gcs-web.com
neuroneticsinc.gcs-web.com
oceanbiomedical.gcs-web.com
otonomo.gcs-web.com
portagebiotech.gcs-web.com
proceptbiorobotics.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
sabrestrategicacquisitioncorp.gcs-web.com
saputoinvestorday.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
tremorinternationalltd.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
waitr.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com
xostrucks.gcs-web.com
zailabranddday.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOiDCCDXCgAwIBAgISBLxyXapVUHE4ckFpBgqxxw3TMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMDYyMTIzNDhaFw0yMjAxMDQyMTIzNDdaMCYxJDAiBgNVBAMT
G2xlYXBmcm9nLXNzbC00Ny5nY3Mtd2ViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCtcMP9ObYuJ7ZLkrQI/vhN6s61Bx/BS2olJQHyZ3V289tH
aelNhHls/HUfCEn9uQt4zOVFqfxJrVYUFO+Pxt04xpAOoyc39DPnGdESw4EMAr6x
CUx3IMSNtb9nOll06i68YtyMTMaREWfH+iDWyRPtEYj0UAVgM5FZUMm7VvNPS4vw
6+1MRa5KDZmNAShcX5oJeuPNwTOfZh27D8uoCmfQ0CUP/N7CNvja/isjrYjN7/qr
0Z4zOrkQGcQG+vSeAawbCf17Yd581qKoiuOo837cAMVWns1KAw4LwNT62Gdo5WM/
SYe2PN0SYR7Ucli5RvCYFKotoImkTVPywYFVQpkCAwEAAaOCC6IwggueMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQU79YzZG+QiA6cNs98SGq/0uEa9vQwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wgglwBgNVHREEgglnMIIJY4IlMjAyMWludmVzdG9yZGF5
LmN0Zmpld2VsbGVyeWdyb3VwLmNvbYIeMjAyMXJhbmRkZGF5LnphaWxhYm9yYXRv
cnkuY29tghNhYWRpYmlvLmdjcy13ZWIuY29tghRhZGFnaW90eC5nY3Mtd2ViLmNv
bYIVYWVyb2Zhcm1zLmdjcy13ZWIuY29tghhhZ2lsZXRob3VnaHQuZ2NzLXdlYi5j
b22CE2FydGVyaXMuZ2NzLXdlYi5jb22CIWJyYW5keXdpbmVyZWFsdHl0cnVzdC5n
Y3Mtd2ViLmNvbYIWY2FyaWJvdWJpby5nY3Mtd2ViLmNvbYIWY2VsbGVicml0ZS5n
Y3Mtd2ViLmNvbYISY2xhcnVzLmdjcy13ZWIuY29tghdjb21wb3NlY3VyZS5nY3Mt
d2ViLmNvbYIdY3RmamV3ZWxsZXJ5Z3JvdXAuZ2NzLXdlYi5jb22CFGN5dGVrYmlv
Lmdjcy13ZWIuY29tghBkb21hLmdjcy13ZWIuY29tghZmcmVzaHdvcmtzLmdjcy13
ZWIuY29tghlnYXJyZXR0bW90aW9uLmdjcy13ZWIuY29tghlncmVlbmxhbmR0ZWNo
Lmdjcy13ZWIuY29tghJoZWxiaXouZ2NzLXdlYi5jb22CF2ltbXVuZWVyaW5nLmdj
cy13ZWIuY29tghppbnR1aXR5bWVkaWNhbC5nY3Mtd2ViLmNvbYIdaW52ZXN0b3Iu
YnJhbmR5d2luZXJlYWx0eS5jb22CF2ludmVzdG9yLmNhcmlib3ViaW8uY29tghFp
bnZlc3Rvci5kb21hLmNvbYIXaW52ZXN0b3IuZnJlc2h3b3Jrcy5jb22CHWludmVz
dG9yLnNlY3VyaXR5bmF0aW9uYWwuY29tgiBpbnZlc3Rvci50cmVtb3JpbnRlcm5h
dGlvbmFsLmNvbYIWaW52ZXN0b3JkYXkuc2FwdXRvLmNvbYIWaW52ZXN0b3JzLmFk
YWdpb3R4LmNvbYIXaW52ZXN0b3JzLmFlcm9mYXJtcy5jb22CGGludmVzdG9ycy5j
ZWxsZWJyaXRlLmNvbYIgaW52ZXN0b3JzLmNsYXJ1c3RoZXJhcGV1dGljcy5jb22C
FmludmVzdG9ycy5jeXRla2Jpby5jb22CEmludmVzdG9ycy5kb21hLmNvbYIbaW52
ZXN0b3JzLmdhcnJldHRtb3Rpb24uY29tghRpbnZlc3RvcnMuaGVsYml6LmNvbYIc
aW52ZXN0b3JzLmludHVpdHltZWRpY2FsLmNvbYIdaW52ZXN0b3JzLm9jZWFuYmlv
bWVkaWNhbC5jb22CFGludmVzdG9ycy5vdG9ub21vLmlvghZpbnZlc3RvcnMucmFs
bHliaW8uY29tgitpbnZlc3RvcnMuc2FicmVzdHJhdGVnaWNhY3F1aXNpdGlvbmNv
cnAuY29tghZpbnZlc3RvcnMuc3Vycm96ZW4uY29tgiBpbnZlc3RvcnMudGVuYXlh
dGhlcmFwZXV0aWNzLmNvbYIhaW52ZXN0b3JzLnRyZW1vcmludGVybmF0aW9uYWwu
Y29tghZpbnZlc3RvcnMud2FpdHJhcHAuY29tghlpbnZlc3RvcnMud2NnY2xpbmlj
YWwuY29tghdpbnZlc3RvcnMueG9zdHJ1Y2tzLmNvbYIOaXIuYWFkaWJpby5jb22C
E2lyLmFnaWxldGhvdWdodC5jb22CDmlyLmFydGVyaXMuY29tghJpci5jb21wb3Nl
Y3VyZS5jb22CC2lyLmRvbWEuY29tghFpci5mcmVzaHdvcmtzLmNvbYIQaXIuZ3Rl
Yy10ZWNoLmNvbYISaXIuaW1tdW5lZXJpbmcuY29tgg5pci5uYWx1bWVkLmNvbYIO
aXIubmV0ZWFzZS5jb22CEmlyLm5ldXJvbmV0aWNzLmNvbYIVaXIucG9ydGFnZWJp
b3RlY2guY29tghppci5wcm9jZXB0LWJpb3JvYm90aWNzLmNvbYIcaXIucHJvbWV0
aGV1c2Jpb3NjaWVuY2VzLmNvbYIYaXIucmV4Zm9yZGluZHVzdHJpYWwuY29tghBp
ci5yaXNraWZpZWQuY29tghlpci5zb3V0aGVybnN0YXRlc2JhbmsubmV0gg9pci52
aXZpZGlvbi5jb22CEWlyLndpbmR0cmVldHguY29tghtsZWFwZnJvZy1zc2wtNDcu
Z2NzLXdlYi5jb22CE25hbHVtZWQuZ2NzLXdlYi5jb22CE25ldGVhc2UuZ2NzLXdl
Yi5jb22CGm5ldXJvbmV0aWNzaW5jLmdjcy13ZWIuY29tghtvY2VhbmJpb21lZGlj
YWwuZ2NzLXdlYi5jb22CE290b25vbW8uZ2NzLXdlYi5jb22CGnBvcnRhZ2ViaW90
ZWNoLmdjcy13ZWIuY29tgh5wcm9jZXB0Ymlvcm9ib3RpY3MuZ2NzLXdlYi5jb22C
IXByb21ldGhldXNiaW9zY2llbmNlcy5nY3Mtd2ViLmNvbYIUcmFsbHliaW8uZ2Nz
LXdlYi5jb22CHXJleGZvcmRpbmR1c3RyaWFsLmdjcy13ZWIuY29tghVyaXNraWZp
ZWQuZ2NzLXdlYi5jb22CKXNhYnJlc3RyYXRlZ2ljYWNxdWlzaXRpb25jb3JwLmdj
cy13ZWIuY29tgh1zYXB1dG9pbnZlc3RvcmRheS5nY3Mtd2ViLmNvbYIcc2VjdXJp
dHluYXRpb25hbC5nY3Mtd2ViLmNvbYIac291dGhlcm5zdGF0ZXMuZ2NzLXdlYi5j
b22CFHN1cnJvemVuLmdjcy13ZWIuY29tgh50ZW5heWF0aGVyYXBldXRpY3MuZ2Nz
LXdlYi5jb22CInRyZW1vcmludGVybmF0aW9uYWxsdGQuZ2NzLXdlYi5jb22CG3Zp
Y3Rvcmlhc3NlY3JldC5nY3Mtd2ViLmNvbYIUdml2aWRpb24uZ2NzLXdlYi5jb22C
EXdhaXRyLmdjcy13ZWIuY29tghd3Y2djbGluaWNhbC5nY3Mtd2ViLmNvbYIWd2lu
ZHRyZWV0eC5nY3Mtd2ViLmNvbYIcd3d3LmlyLnJleGZvcmRpbmR1c3RyaWFsLmNv
bYIcd3d3LnZpY3Rvcmlhc3NlY3JldGFuZGNvLmNvbYIVeG9zdHJ1Y2tzLmdjcy13
ZWIuY29tghp6YWlsYWJyYW5kZGRheS5nY3Mtd2ViLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEalVet1
+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABfFe0omEAAAQDAEcwRQIgcygN
SzRdnK13MOMyQajuuKhlToZTafCLjqn7PKLqCWACIQDCFRxtFvFjuriRi9G6stuO
Tsau+ce005LZ9DyuZEpkUAB2AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBE
XCpzAAABfFe0pCYAAAQDAEcwRQIhAI3P7nDb3Fx2ocyvdneBV+uisO0dmolf5aYb
AL4vycS0AiB7R7OQCQ198mm8g5+NvMk1tWc4+YSe12nXDyVuXiSajDANBgkqhkiG
9w0BAQsFAAOCAQEAsA/R1AIWZaYqjXfGm48PaXCNSBZE2dDORUXZVdirdrGg2gZ/
4wK7g3yx2UOAQ7PMZnZNp4Gm8XvLD1NJLjTZHzETEZ+J5A5Jq6hgH2Ksx4oU3njS
VYJhdCdFvcBP4vcjXev93dQSMFtbdSfapHJGEB5CmBpm68jyxdj5ZdDM9XGZ/w1G
tQPNe62+cfkoXpYubXHIwYgWDupGHGmdZAV7ojXXMj5vU+5oUiAOVC6HLkfFRXvE
+0TRACvQ1V8oqYXN49DFmBvs0/fsvfJvyH3jInGu3rHH0b8oiRc4Ep49PfRh4H3W
FhAmgSiNOEN7oZkulW1QsWsh/bx7vI9//InDXg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK1ww/05ti4ntkuStAj+
+E3qzrUHH8FLaiUlAfJndXbz20dp6U2EeWz8dR8ISf25C3jM5UWp/EmtVhQU74/G
3TjGkA6jJzf0M+cZ0RLDgQwCvrEJTHcgxI21v2c6WXTqLrxi3IxMxpERZ8f6INbJ
E+0RiPRQBWAzkVlQybtW809Li/Dr7UxFrkoNmY0BKFxfmgl6483BM59mHbsPy6gK
Z9DQJQ/83sI2+Nr+KyOtiM3v+qvRnjM6uRAZxAb69J4BrBsJ/Xth3nzWoqiK46jz
ftwAxVaezUoDDgvA1PrYZ2jlYz9Jh7Y83RJhHtRyWLlG8JgUqi2giaRNU/LBgVVC
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412574247038073663976550441543643370556883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-06 21:23:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-04 21:23:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24323281247000570482972419384858240572784929062581617880856105535826949417357998002844073012797951802727182576472363559476860037138569480244108517121460243057924648976569204306946627967459370135955555220117319197550068091842071365691750431483469197855503263027339619933131888287791561356106812994074723997668348419417168664658078402826806377438224608229125229556607015870063049049069039834063791995853798296740183915307397593069306464333630311453955801735986350081015661016538815611058027926487262852474119459920216340136976785456267643318433091180529220559052156828846391869092046881221856891282840491542250916233881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efd633646f90880e9c36cf7c486abfd2e11af6f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.ctfjewellerygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021randdday.zailaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadibio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilethought.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteris.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellebrite.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composecure.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfjewellerygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshworks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.saputo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cellebrite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.otonomo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sabrestrategicacquisitioncorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tremorinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.waitrapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xostrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aadibio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agilethought.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.arteris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.composecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.freshworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.netease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.neuronetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.procept-biorobotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netease.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroneticsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonomo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proceptbiorobotics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabrestrategicacquisitioncorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saputoinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremorinternationalltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xostrucks.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zailabranddday.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c57b4a2610000040300473045022073280d4b345d9cad7730e33241a8eeb8a8654e865369f08b8ea9fb3ca2ea0960022100c2151c6d16f163bab8918bd1bab2db8e4ec6aef9c7b4d392d9f43cae644a6450007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017c57b4a42600000403004730450221008dcfee70dbdc5c76a1ccaf76778157eba2b0ed1d9a895fe5a61b00be2fc9c4b402207b47b390090d7df269bc839f8dbcc935b56738f9849ed769d70f256e5e249a8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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