leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 03:57:4c:ca:08:c1:ac:99:9c:29:9d:fe:ca:5c:8a:29:15:67 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:57:4c:ca:08:c1:ac:99:9c:29:9d:fe:ca:5c:8a:29:15:67
Serial Number (int): 291043494066651193221969867382311602427239
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:08:94:eb:28:49:1a:86:8d:9d:d8:fd:94:e1:43:78:47:19:3b:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:5d:f2:90:91:3c:48:b6:f0:f0:8f:98:a8:66:52:13:37:12:7e:c8
Fingerprint (sha256): ae:cd:8e:09:03:0e:3c:10:da:81:2e:15:80:9a:7e:61:3a:78:53:30:5b:c6:6c:66:6c:29:0d:c8:67:74:90:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adamispharmaceuticals.gcs-web.com
aerovatetx.gcs-web.com
americanassetstrust.gcs-web.com
atour.gcs-web.com
brightspire.gcs-web.com
cavotecsa.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
corporate.partycity.com
dallasnewscorp.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
erasca.gcs-web.com
ghres.gcs-web.com
hcwbiologics.gcs-web.com
healthcareroyalty.gcs-web.com
highpeakenergy.gcs-web.com
intapp.gcs-web.com
integralads.gcs-web.com
intrepidpotashinc.gcs-web.com
investor.dallasnewscorp.com
investor.dallasnewscorporation.com
investor.ghres.com
investor.partycity.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.erasca.com
investors.hcwbiologics.com
investors.intapp.com
investors.integralads.com
investors.legalzoom.com
investors.molecularpartners.com
investors.originmaterials.com
investors.partycity.com
investors.prokidney.com
investors.pwpartners.com
investors.quwangroup.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.aerovatetx.com
ir.americanassetstrust.com
ir.brightspire.com
ir.cavotec.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.highpeakenergy.com
ir.lyell.com
ir.many-core.com
ir.monterosatx.com
ir.northann.com
ir.omegatherapeutics.com
ir.schwazze.com
ir.tempesttx.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
molecularpartners.gcs-web.com
monterosatx.gcs-web.com
northann.gcs-web.com
omegatherapeutics.gcs-web.com
originmaterials.gcs-web.com
partycity.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
prokidney.gcs-web.com
quwanholdinglimited.gcs-web.com
scholarrockinvestorday.gcs-web.com
schwazze.gcs-web.com
secondsight.gcs-web.com
silverspikecap.gcs-web.com
ssic.silverspikecap.com
tempesttx.gcs-web.com
theratech.gcs-web.com
uscentury.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xcelbrands.gcs-web.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com
leapfrog-ssl-29.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG0/f10Id8pYauuJ9/2l
NrAVwiKTmxhQz5I8EQ/PLrvGdja1ApgjHFL05S78lANPuXR5E5gLTXSlPQYRRMX6
yY9M0swcX8v7Mofdaqol54cD1gxA1nRuWtM+Y5zX7U6ISU18gr0N2ENYPtFt+Ybg
gTCBb9MkGsocNBSPiAt7co+pc78fIMpo4QiQRe7zeknr6O9EZjyRjhedV7eoMNmL
Ktz6dbMh+cRQay84SSxS8+9q0e1wXpG8ACmg4aSa/R0/DQ+1Dsp12UdIX+ROmoxn
oUbQp0Ivlu7aIxP0nounVW//TTHB4O+gdP3K6JwsuJdmo+HsBFA1JM9W8duWCbfz
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291043494066651193221969867382311602427239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 22:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 22:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20756954229402856038033305605588378878028410041388660252180747265854623524244308163024769855771405009260372125145281414902601830788977223556717038260096787082833891483801634598296757173957280605609971592346649085843688389518544193998558518683775989067304190277020136995277269075181139804572640434581476016384435778231064731311223798955124161011795463576822164314332326579231128202849181780379356872735450634799279994671716989029770183311895650939364508793243007429500682494754562682405401151159987930282426801328266137698944713843109785306985150316225317434958265047278293454381703831458494423943641398579251323073393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e0894eb28491a868d9dd8fd94e1437847193bda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamispharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovatetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanassetstrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavotecsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnewscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwbiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpeakenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ghres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.erasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hcwbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.integralads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molecularpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.originmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.prokidney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.quwangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerovatetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.americanassetstrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cavotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.highpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monterosatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.northann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.schwazze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tempesttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecularpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterosatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northann.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originmaterials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partycity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prokidney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwazze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspikecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssic.silverspikecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempesttx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcelbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2716f29b0000040300483046022100dfbd74941a2697bf6ffc12168432635c9a958cf059bf51d72d928cf48978aed6022100b093e12ee8d5aa80d692e0a53c56c77bed1a65fc76560e570d3cd3d4ce726003007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2716f35f0000040300463044022026040dbeffbd1a72e6b32dea80300bff93c42281edb642a1b62574e33df4f16b02206cf261007ff72a263bd8886fa15f77a213b0f7b0274d2fe0da6330fac36efacf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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