leapfrog-ssl-47.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:eb:0c:f1:d5:5a:ca:4f:4c:76:e3:94:37:9d:fe:46:66:e6 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-47.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:0c:f1:d5:5a:ca:4f:4c:76:e3:94:37:9d:fe:46:66:e6
Serial Number (int): 341320420428539996780004272024258550851302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:44:1e:5b:96:8d:4d:f7:70:5b:a7:e4:9a:56:98:00:22:0a:6e:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:75:2e:01:2e:6a:10:f5:e0:16:3c:d3:d6:8f:36:fa:ed:b2:a7:98
Fingerprint (sha256): 90:f7:1b:7f:c8:5e:44:63:87:13:88:da:e4:ba:48:b2:4f:b9:85:e9:bb:35:4b:7c:b0:df:5b:cc:f6:6f:b7:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-47.gcs-web.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-47.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adagiotx.gcs-web.com
aerofarms.gcs-web.com
agilethought.gcs-web.com
brandywinerealtytrust.gcs-web.com
cariboubio.gcs-web.com
clarus.gcs-web.com
cytekbio.gcs-web.com
doma.gcs-web.com
garrettmotion.gcs-web.com
greenlandtech.gcs-web.com
helbiz.gcs-web.com
immuneering.gcs-web.com
intuitymedical.gcs-web.com
investor.brandywinerealty.com
investor.cariboubio.com
investor.doma.com
investor.securitynational.com
investors.adagiotx.com
investors.aerofarms.com
investors.clarustherapeutics.com
investors.cytekbio.com
investors.doma.com
investors.garrettmotion.com
investors.helbiz.com
investors.intuitymedical.com
investors.oceanbiomedical.com
investors.rallybio.com
investors.surrozen.com
investors.tenayatherapeutics.com
investors.wcgclinical.com
ir.agilethought.com
ir.gtec-tech.com
ir.immuneering.com
ir.nalumed.com
ir.portagebiotech.com
ir.prometheusbiosciences.com
ir.rexfordindustrial.com
ir.riskified.com
ir.southernstatesbank.net
ir.vividion.com
ir.windtreetx.com
leapfrog-ssl-47.gcs-web.com
nalumed.gcs-web.com
oceanbiomedical.gcs-web.com
portagebiotech.gcs-web.com
prometheusbiosciences.gcs-web.com
rallybio.gcs-web.com
rexfordindustrial.gcs-web.com
riskified.gcs-web.com
securitynational.gcs-web.com
southernstates.gcs-web.com
surrozen.gcs-web.com
tenayatherapeutics.gcs-web.com
victoriassecret.gcs-web.com
vividion.gcs-web.com
wcgclinical.gcs-web.com
windtreetx.gcs-web.com
www.ir.rexfordindustrial.com
www.victoriassecretandco.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-47.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk7FHLo2jMgivBSYfrf
L692+WRjU/zggyKxWn1fKeUo+f2aiFselmS567L4SzFRxrAcAziNfYhm6o5PolvA
9yg69iGvXcfYiNFRA0zbLTKcd1glxPJOVKMMcJsCeRwwtxD3N65YQCVnpjON9Qh0
vTs+BGeBOpTU70yGIAM3xhK+42VS2PAMFajAYpVPx2U/Za0aN2OjHOtyKjRYWXPF
ej6KVaLzO38xWF3JKXj/u5rtLDCxGQOsXItdhy4GUYclIb/nZ6SdGJKDMfHzxJ4v
y9V1dW0qqoXJecbPjn/FjE3gJl2xInFRD0LbgUZvQ3tom/VRnc2OZ+HQWq+qYxQa
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341320420428539996780004272024258550851302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-04 11:34:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-02 11:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24084508539926228793869759801192082445766415896898252062774474131693655687438419247318588974417019981398967188475720037783596030355009983650647883384216404842737211247665773697054204380876364716444393615885721620628506912713411203826093695601477795897225682521918578015500263865478904401110402088968232647230275636580831785908492036626126446611998255783969011891537699333585922586794856980878467929753451729814540869788108245507471367069916324419716236125773084654135574797783537303129811574844303654770777530824080008216606731454754149389126065447250252236478844299108804817468897890961030404328140315383443257301613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1441e5b968d4df7705ba7e49a569800220a6ee5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1500 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adagiotx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerofarms.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilethought.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinerealtytrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariboubio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytekbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrettmotion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlandtech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helbiz.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immuneering.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitymedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.brandywinerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cariboubio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.securitynational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.adagiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aerofarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clarustherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cytekbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.doma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.garrettmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.helbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intuitymedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.oceanbiomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rallybio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.surrozen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.tenayatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.wcgclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.agilethought.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.gtec-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.immuneering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nalumed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.portagebiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.prometheusbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.riskified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.southernstatesbank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vividion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.windtreetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-47.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nalumed.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbiomedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portagebiotech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheusbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexfordindustrial.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskified.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitynational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernstates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surrozen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenayatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriassecret.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividion.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcgclinical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windtreetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.rexfordindustrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriassecretandco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006e4fd880038528cba4af1c2a5f2bd52a244c7b9cbaac9af0d5ebbde8c423e18a27b279b0af94a715b1133eadd008372811861590f6463169bdf20312059459b67442820970e174fb8c0d4c2ee800253255eba82c6577b84e21936dd1ef8f082d3f0b67917cf2988c0bfe6ce303cffb96ad19d109cc0202abd33ffeffcac77f96b55bf4c8ac049a0e53a29f73b14d0fda7831f7b055083365016e3064b8c09080a7a8b4a82621a5464a1da587c461437aa87fd1d60493a0a814b03d7bf8b7ceae3084a689680777a665d587c7355dec0f40a7aa6359a86e759d9fc821c7cee6382566d1e1fbb3791badf78d5e6275b9832e1e884b178764779540759e0409c4a