leapfrog-ssl-45.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6a:17:df:15:3f:c9:e6:06:d6:58:df:90:59:36:f4:80:ad was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leapfrog-ssl-45.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6a:17:df:15:3f:c9:e6:06:d6:58:df:90:59:36:f4:80:ad
Serial Number (int): 384550805177747430532535796280675060187309
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:0f:6f:d7:19:15:be:54:33:d9:2b:0f:54:f4:df:77:30:89:55:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:fb:b2:f3:90:cd:a5:de:e7:45:ab:07:3c:94:7a:4e:2f:3e:8a:88
Fingerprint (sha256): af:89:f5:73:31:78:7b:8c:e9:23:63:ec:46:69:7e:e7:2a:88:92:f4:43:b9:21:2d:db:c5:fe:45:3a:b7:ca:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-45.gcs-web.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-45.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adamispharmaceuticals.gcs-web.com
aerovatetx.gcs-web.com
americanassetstrust.gcs-web.com
atour.gcs-web.com
brightspire.gcs-web.com
cavotecsa.gcs-web.com
centurytx.gcs-web.com
cloverbiopharma.gcs-web.com
confluent.gcs-web.com
corporate.partycity.com
dallasnewscorp.gcs-web.com
eliemtx.gcs-web.com
enovix.gcs-web.com
erasca.gcs-web.com
ghres.gcs-web.com
hcwbiologics.gcs-web.com
healthcareroyalty.gcs-web.com
highpeakenergy.gcs-web.com
intapp.gcs-web.com
integralads.gcs-web.com
intrepidpotashinc.gcs-web.com
investor.dallasnewscorp.com
investor.dallasnewscorporation.com
investor.ghres.com
investor.landmarkmlp.com
investor.partycity.com
investorday.scholarrock.com
investors.centurytx.com
investors.confluent.io
investors.erasca.com
investors.hcwbiologics.com
investors.intapp.com
investors.integralads.com
investors.legalzoom.com
investors.molecularpartners.com
investors.originmaterials.com
investors.partycity.com
investors.prokidney.com
investors.pwpartners.com
investors.rover.com
investors.uscentury.com
investors.uscenturybank.com
investors.xometry.com
ir.52tt.com
ir.aerovatetx.com
ir.americanassetstrust.com
ir.brightspire.com
ir.cavotec.com
ir.cloverbiopharma.com
ir.eliemtx.com
ir.enovix.com
ir.healthcareroyalty.com
ir.highpeakenergy.com
ir.lyell.com
ir.many-core.com
ir.monterosatx.com
ir.northann.com
ir.omegatherapeutics.com
ir.schwazze.com
ir.tempesttx.com
ir.weedmaps.com
ir.yaduo.com
ir.zhipin.com
kanzhun.gcs-web.com
landmarkinfrastructurepartnerslp.gcs-web.com
leapfrog-ssl-45.gcs-web.com
legalzoom.gcs-web.com
lyellimmunopharma.gcs-web.com
manycore.gcs-web.com
molecularpartners.gcs-web.com
monterosatx.gcs-web.com
northann.gcs-web.com
omegatherapeutics.gcs-web.com
originmaterials.gcs-web.com
partycity.gcs-web.com
perellaweinbergpartnerslp.gcs-web.com
press.vimeo.com
prokidney.gcs-web.com
quwanholdinglimited.gcs-web.com
rover.gcs-web.com
scholarrockinvestorday.gcs-web.com
schwazze.gcs-web.com
secondsight.gcs-web.com
silverspikecap.gcs-web.com
ssic.silverspikecap.com
tempesttx.gcs-web.com
theratech.gcs-web.com
toromont.gcs-web.com
uscentury.gcs-web.com
vimeopr.gcs-web.com
weedmaps.gcs-web.com
www.theratech.com
xcelbrands.gcs-web.com
xometry.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com
leapfrog-ssl-12.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-45.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvU5O3jHuRTGi++zj7pG
ExLlJAF6Mv17MWQChM/Zy5+q9e7hUr+/YM4lI7OTZFz9hUSMdAuzPtgrwj0gXMLG
KJLbD4Rl8y9JYLCvO6V/mTdgERIPgLmo37fSCOi6mr/WBKaG9okapBusOzK35hGp
rIgMttfWseivGZr5ugCZQd6jF9rPqhmD/jsXsiXrXxQJhiiszE+dqloPlKW4NXq1
kEdrbpdYI7QMkhimVctoNrAzXZLSDVJ2JnMLkVtUZMJI2KP3aqm7mSaHsbX7bLkr
IflNKfZmdJILs1rfN/BsANUfjT2/xsypFYM6+8PQO4eZqyzQgZbv8cSUJhMYxG2N
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384550805177747430532535796280675060187309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 16:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:59:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25621061849321372265152844811928071289161596920837002026757793631144188323803881719861919009664770796582822465340887004889202311824766433663349187948093520811539552604235239510375092551088035229002970748538109746157855033358661830768696607029287736137181836713768133706161590685671116013327335410367525802359636682299241665511545348898488941934812971139262254279008991015971923007950791799917424877308933400554750254245417479429313058427296947348710714354912383591689193604908873039932823233966843218873367020032278298526010928452135114528896878482613504182823324389574073540071326979604691230096944635668053999062299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a50f6fd71915be5433d92b0f54f4df77308955f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamispharmaceuticals.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerovatetx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanassetstrust.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atour.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavotecsa.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurytx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloverbiopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnewscorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliemtx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enovix.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasca.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghres.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwbiologics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareroyalty.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpeakenergy.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intapp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralads.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrepidpotashinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.dallasnewscorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.ghres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.landmarkmlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.scholarrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.centurytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.confluent.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.erasca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.hcwbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.intapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.integralads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.legalzoom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.molecularpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.originmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.partycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.prokidney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pwpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.rover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.uscenturybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.xometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.52tt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.aerovatetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.americanassetstrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.brightspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cavotec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.cloverbiopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.eliemtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.enovix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.healthcareroyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.highpeakenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.lyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.many-core.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.monterosatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.northann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.omegatherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.schwazze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tempesttx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yaduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zhipin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzhun.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landmarkinfrastructurepartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-45.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyellimmunopharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manycore.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molecularpartners.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monterosatx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northann.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegatherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originmaterials.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partycity.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perellaweinbergpartnerslp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.vimeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prokidney.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwanholdinglimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rover.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarrockinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwazze.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondsight.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverspikecap.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssic.silverspikecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempesttx.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratech.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toromont.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscentury.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeopr.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedmaps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcelbrands.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xometry.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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