leapfrog-ssl-37.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:52:40:84:cf:6b:34:f5:14:ec:ce:6b:3a:17:bc:94:46 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-37.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:52:40:84:cf:6b:34:f5:14:ec:ce:6b:3a:17:bc:94:46
Serial Number (int): 322356733170493510470394595973036630643782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:3b:62:45:9d:75:12:6e:94:fc:03:19:9e:61:56:43:89:20:bc:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:81:e8:fd:d3:0b:a5:91:a6:3a:10:5d:c8:e4:45:f7:c0:d0:e3:20
Fingerprint (sha256): a6:90:38:23:07:90:03:f7:89:80:b8:31:8e:71:d2:a1:a8:ff:71:ae:e1:5a:a2:48:ff:b7:3a:94:8a:88:e1:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-37.gcs-web.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-37.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagesolutions.gcs-web.com
allegromicro.gcs-web.com
americanstateswatercompany.gcs-web.com
aquabounty.gcs-web.com
ateapharma.gcs-web.com
avadelpharmaceuticalsplc.gcs-web.com
bassettfurniture.gcs-web.com
biodesix.gcs-web.com
brinker.gcs-web.com
cabotog.gcs-web.com
chinatechfaithwirelesscommunicationtechnologyltd.gcs-web.com
cimpress.gcs-web.com
clearone.gcs-web.com
drhc.gcs-web.com
edgio.gcs-web.com
emcorecorporation.gcs-web.com
eyenoviabio.gcs-web.com
falconminerals.gcs-web.com
fibrogen.gcs-web.com
galecto.gcs-web.com
icc.gcs-web.com
icfinternational.gcs-web.com
in8bio.gcs-web.com
integralifesciences.gcs-web.com
investor-dk.tcmgroup.dk
investor-en.tcmgroup.dk
investor.cabot-corp.com
investor.coopercos.com
investor.drhc.com
investor.emcore.com
investor.fibrogen.com
investor.icf.com
investor.integralife.com
investor.lordstownmotors.com
investors.allegromicro.com
investors.aquabounty.com
investors.avadel.com
investors.bassettfurniture.com
investors.biodesix.com
investors.brinker.com
investors.clearone.com
investors.edg.io
investors.in8bio.com
investors.koss.com
investors.nxt-id.com
investors.satellogic.com
investors.soterahealth.com
investors.teradyne.com
ir.advantagesolutions.net
ir.ateapharma.com
ir.cimpress.com
ir.eyenovia.com
ir.galecto.com
ir.iccholdingsinc.com
ir.joinroot.com
ir.kalvista.com
ir.krystalbio.com
ir.mediwound.com
ir.mind-technology.com
ir.nucana.com
ir.p10alts.com
ir.p10industries.com
ir.rocketpharma.com
ir.sigilon.com
ir.tabularasahealthcare.com
ir.techfaithwireless.com
ir.vaccinex.com
jaysheadphones.gcs-web.com
joinroot.gcs-web.com
kalvista.gcs-web.com
kosscorporation.gcs-web.com
krystalbio.gcs-web.com
leapfrog-ssl-37.gcs-web.com
lordstownmotors.gcs-web.com
mediwound.gcs-web.com
mitchamindustriesinc.gcs-web.com
moleculartemplates.gcs-web.com
nucana.gcs-web.com
nxtid.gcs-web.com
p10industries.gcs-web.com
redfin.gcs-web.com
rocketpharmaceuticals.gcs-web.com
satellogic.gcs-web.com
sigilon.gcs-web.com
soterahealth.gcs-web.com
tabularasahealthcareinc.gcs-web.com
tcmgroupas.gcs-web.com
teradyne.gcs-web.com
thecoopercompaniesinc.gcs-web.com
vaccinex.gcs-web.com
www.aswater.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-37.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ5e9+PoyOXvlaI/k4/h
taEo57pnK439JSLbB3ieeszcXhwfb8vEcrxTU+YrbNyP5ybZjKi+ohVjqJftx6BO
mz4Dkffz8zuIg7pzslSvjGHg2rMMXkpxMCWy63UObzONs6mtWF5QbzwHt18vi7cN
fsp3YWyvZGxMbarw/t29x4ZSXWVOLeoZHS2NQtadMNG/Zs2IrSTrmz/ji8dYEgfD
XIljGQWhoCEAQroud93vb7XPRT9RYoa7d49CXUcy1P4VcqKrv8no1u6AhIXjWI39
hufNXG3hSjCYbKLkqUMlyRS2Nmickw84iREBYV1s4XidmVhcGWdNPFUNRDZnJBFI
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322356733170493510470394595973036630643782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 15:29:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 15:29:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-37.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22422275614966228395842493810689662732573621673335896017068186457436294517220879638164613971575192039917669617820543631640595420391387376719876725803875692186920286155683184024488815427047673338085595471809971467329701192658125962612448581520322603474232635095814579405844606248502250666790420177718679977735127039240164475865678172186935518103492527135336588978305257414177192480673626905910960174705562839048546950614752735326224111393682514533399181810806791010558020742890385425440791456432365879900314731210948786897400712756238199145815549958008819684931605707719728341613045978012774737354212807323292074592403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							713b62459d75126e94fc03199e6156438920bc49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagesolutions.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegromicro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanstateswatercompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquabounty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateapharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avadelpharmaceuticalsplc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassettfurniture.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodesix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinker.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabotog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinatechfaithwirelesscommunicationtechnologyltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimpress.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearone.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcorecorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyenoviabio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconminerals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibrogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galecto.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icfinternational.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in8bio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralifesciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-dk.tcmgroup.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-en.tcmgroup.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.cabot-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.coopercos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.drhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.emcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.fibrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.icf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.integralife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.lordstownmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.allegromicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aquabounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.avadel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bassettfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.biodesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.brinker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.clearone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.edg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.in8bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.koss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.nxt-id.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.satellogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.soterahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.teradyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.advantagesolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ateapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eyenovia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.galecto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iccholdingsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.joinroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.kalvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.krystalbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mediwound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.mind-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nucana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.p10alts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.p10industries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.rocketpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.sigilon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tabularasahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.techfaithwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vaccinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaysheadphones.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinroot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalvista.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosscorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krystalbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-37.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordstownmotors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediwound.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchamindustriesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moleculartemplates.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nucana.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxtid.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p10industries.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redfin.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketpharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satellogic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigilon.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soterahealth.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabularasahealthcareinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcmgroupas.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teradyne.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecoopercompaniesinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinex.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aswater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b15461fa80000040300483046022100c0c41a5e2ef8124a6fcab57e34b803a0952b247591d2e963d4bce211346d907d0221009c92ae9b8069d4bcb60de97ff4255dbbe7bb903dd465b924583291757a999cd3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b15461fab000004030047304502207f431a1403c6d7190e49f354d7fecb59a033daab46441431500897269ce00c87022100b7a527244c2fb5bf4e466b2eed5da6b3369fc6a9b7310d819f42fd5c6c657105
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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