leapfrog-ssl-44.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:88:f1:83:aa:01:8a:f1:04:2b:39:d1:45:5b:85:63:df:db was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-44.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:f1:83:aa:01:8a:f1:04:2b:39:d1:45:5b:85:63:df:db
Serial Number (int): 307936287282532864844142751382644308828123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:e2:fa:39:f4:79:46:dd:5c:e6:7a:43:fc:ed:8d:31:89:40:61:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:53:76:4a:54:90:ab:d8:5c:96:df:0e:3d:f4:7e:23:24:ae:c5:30
Fingerprint (sha256): 8f:30:83:e0:0f:02:53:70:79:53:5a:9f:76:15:18:26:62:c0:80:0f:d5:20:3c:19:f1:09:98:76:c9:d6:b2:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-44.gcs-web.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-44.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2021investorday.challenger.com.au
amunix.gcs-web.com
anikatherapeuticsincinvestorday.gcs-web.com
caladrius.gcs-web.com
castlecreekbiosciences.gcs-web.com
centessapharmaceuticals.gcs-web.com
challengerinvestorday.gcs-web.com
codexdna.gcs-web.com
contexttherapeutics.gcs-web.com
dayone.gcs-web.com
duolingo.gcs-web.com
enact.gcs-web.com
evercommerce.gcs-web.com
flywire.gcs-web.com
foruworldwideinc.gcs-web.com
genenta.gcs-web.com
globaleonlineltd.gcs-web.com
harrowinc.gcs-web.com
heidrick.gcs-web.com
huvepharmaeood.gcs-web.com
investor.roivant.com
investor.sagimet.com
investor.singulargenomics.com
investorday2021.suncor.com
investors.centessa.com
investors.duolingo.com
investors.evercommerce.com
investors.global-e.com
investors.harrowinc.com
investors.heidrick.com
investors.marketwise.com
investors.marqeta.com
investors.monsterbevcorp.com
investors.nautilus.bio
investors.oatly.com
investors.renovorx.com
investors.rxsight.com
investors.sightsciences.com
investors.somalogic.com
investors.tegna.com
investors.vailresorts.com
investors.vimeo.com
ir.amunix.com
ir.caladrius.com
ir.castlecreekbio.com
ir.codexdna.com
ir.contexttherapeutics.com
ir.dayonebio.com
ir.enactmi.com
ir.flywire.com
ir.for-u.com
ir.genenta.com
ir.huvepharma.com
ir.katapultholdings.com
ir.lottery.com
ir.qiniu.com
ir.rotech.com
ir.teknova.com
ir.vervetx.com
ir.walkme.com
katapultholdings.gcs-web.com
leapfrog-ssl-44.gcs-web.com
lottery.gcs-web.com
marketwise.gcs-web.com
marqeta.gcs-web.com
monsterenergycompany.gcs-web.com
nautilusbio.gcs-web.com
oatlygroup.gcs-web.com
qiniulimited.gcs-web.com
renovorx.gcs-web.com
roivant.gcs-web.com
rotech.gcs-web.com
rxsight.gcs-web.com
sagimetbiosciences.gcs-web.com
sightsciences.gcs-web.com
singulargenomics.gcs-web.com
somalogic.gcs-web.com
suncor.gcs-web.com
tegna.gcs-web.com
teknova.gcs-web.com
vailresortsinc.gcs-web.com
vervetx.gcs-web.com
vimeo.gcs-web.com
walkme.gcs-web.com
www.anikainvestorday.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-44.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudqfCVHxb7eVsM8Z6rws
ZUJp6a9GLTfMMsIKDoKGYIHs0YsNWm4VoA6QTPsi/usxQBxRs9t3B8lOtCvjsRM8
Efhc3o+Wpyw90El2rC5QEoteIU5Elq3Gagw/l9kjBFy+0gpE5gq/JlAXdQxdFxMF
DYBg3c7Zn5aYvMg7kp3xILSl+AopO3T30htnKPtVp7ohbXa5F/iTJv5FFtyTFLal
knxZbqWXqB9kl59oCwwDMWyA9LkxX5irgzZyWpgUYvGkpg6wK8sZ6ffBWrAXiUzt
3IDvK6Y8KpgvyPs6wYv6304iq+Ucdf8k8PqIOLOEjZ6xMeSIz0hhVQtaxvMSlMN6
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307936287282532864844142751382644308828123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-04 15:51:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-02 15:51:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23461892568164558656380207691420307754950270143635300389811228529119901462806328097655127866506658563601036866033715537872500989007144714833935832310897807140707373724266559800552617933398002306378655780949868297061904180496979209700992553542834446001352261060988562379318849309957555789627331594258751621460948410188853508067246443454821940259898519829457199976086593620907619557572774036618918119839662472983277137328959104011164815431475991813450955326809651031926962931384108247973722625524456336453218677401918047072750862035543188391799058913015196979465325106449730328579152745925439708697327694888833084783359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ee2fa39f47946dd5ce67a43fced8d31894061b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2019 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2021investorday.challenger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amunix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikatherapeuticsincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caladrius.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlecreekbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centessapharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'challengerinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexdna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexttherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duolingo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enact.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evercommerce.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flywire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foruworldwideinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genenta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaleonlineltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrowinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidrick.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huvepharmaeood.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.roivant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sagimet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.singulargenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday2021.suncor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.duolingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.evercommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.global-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.harrowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.heidrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marketwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.marqeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.monsterbevcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nautilus.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oatly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.renovorx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rxsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.sightsciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.somalogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tegna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vailresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.amunix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.caladrius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.castlecreekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.codexdna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.contexttherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dayonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enactmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.flywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.for-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.genenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.huvepharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.katapultholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qiniu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.teknova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vervetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.walkme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katapultholdings.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-44.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketwise.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marqeta.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterenergycompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oatlygroup.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiniulimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovorx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roivant.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagimetbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightsciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singulargenomics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somalogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncor.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tegna.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknova.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vailresortsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vervetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkme.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anikainvestorday.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000179d7efd0e0000004030047304502210099b51d49964c26affaff333a88362d2af50f5da48466384880b405db9b057d6c022067146b7b3c366fde43dcbdaf6a5085a08c4e0e6eea7aafb250322a11c57e91f0007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179d7efd2dd0000040300483046022100cd8268180bb848e89a653b1d78bc57b7d82ae52b8daf8a268cddebe0b3c2a7fc022100e3e68211f7b9c45ae2945e1823172cee49c12fe2dbeb04f3ba4a12f823dbfced
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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