leapfrog-ssl-34.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:25:50:29:50:7d:b2:91:be:48:15:de:eb:4a:2c:a5:74:69 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-34.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:50:29:50:7d:b2:91:be:48:15:de:eb:4a:2c:a5:74:69
Serial Number (int): 361146144059501256063393625732877551760489
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:da:73:ca:73:2b:d9:81:e3:a2:7c:11:6a:02:a9:03:4e:54:ad:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:10:6c:00:33:c6:c9:55:35:ad:5e:6e:28:84:9b:d8:11:f2:b2:8d
Fingerprint (sha256): b5:b2:d9:d7:4b:6c:fb:b3:06:b0:ff:2e:98:fd:f1:77:d8:05:2c:3e:ce:ca:e1:12:97:ec:64:ae:35:ef:06:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-34.gcs-web.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-34.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.allegro.eu
accolade.gcs-web.com
agenusbio.gcs-web.com
allegro.gcs-web.com
altagasinvestorday.gcs-web.com
apachecorp.gcs-web.com
avidbio.gcs-web.com
bentleysystems.gcs-web.com
boltbiotherapeutics.gcs-web.com
c4therapeutics.gcs-web.com
capps.gcs-web.com
cerevel.gcs-web.com
chobani.gcs-web.com
cogentbiosciences.gcs-web.com
collectors.gcs-web.com
compasspathways.gcs-web.com
concordmedical.gcs-web.com
corsair.gcs-web.com
echostar.gcs-web.com
elpolloloco.gcs-web.com
fluidigm.gcs-web.com
grab.gcs-web.com
greendot.gcs-web.com
harmonicinc.gcs-web.com
harmonybiosciences.gcs-web.com
houwire.gcs-web.com
iderapharmaceuticalsinc.gcs-web.com
immunogen.gcs-web.com
investor.agenusbio.com
investor.apachecorp.com
investor.apacorp.com
investor.capps.com
investor.elpolloloco.com
investor.harmonicinc.com
investor.immunogen.com
investor.neworiental.org
investor.stevemadden.com
investor.sumologic.com
investor.textainer.com
investorday.altagas.com
investors.aceragen.com
investors.bentley.com
investors.boltbio.com
investors.cerevel.com
investors.chobani.com
investors.cogentbio.com
investors.collectors.com
investors.fluidigm.com
investors.grab.com
investors.magnachip.com
investors.mastercraft.com
investors.outsetmedical.com
investors.pxd.com
investors.shift.com
investors.verdantearth.tech
ir.accolade.com
ir.avidbio.com
ir.c4therapeutics.com
ir.ccm.cn
ir.compasspathways.com
ir.corsair.com
ir.echostar.com
ir.greendot.com
ir.harmonybiosciences.com
ir.houwire.com
ir.iderapharma.com
ir.pmvpharma.com
ir.qudian.com
ir.tattooedchef.com
ir.vivus.com
ir.xin.com
ir.yield10bio.com
ir.zosanopharma.com
jfrog.gcs-web.com
leapfrog-ssl-34.gcs-web.com
magnachipsemiconductorcorp.gcs-web.com
mcbcholdingsinc.gcs-web.com
meritorincinvestorday.gcs-web.com
movementday.praxismedicines.com
neworientaleducationandtechnologygroupinc.gcs-web.com
outsetmedicalinc.gcs-web.com
pioneernaturalresourcescompany.gcs-web.com
pmvpharma.gcs-web.com
praxismedicinesinvestorday.gcs-web.com
qudianinc.gcs-web.com
shareholders.stepstoneglobal.com
shareholders.stepstonegroup.com
shift.gcs-web.com
stepstonegroupinc.gcs-web.com
stevemadden.gcs-web.com
strategyday.meritor.com
sumologic.gcs-web.com
tattooedchef.gcs-web.com
textainergroupholdingsltd.gcs-web.com
uxinlimited.gcs-web.com
verdantearthtechnologies.gcs-web.com
vivusinc.gcs-web.com
yield10bioscienceinc.gcs-web.com
zosanopharmacorporation.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-34.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LrSqJvP/rANOhzm06No
u8KfspjZ6+DM1namwXWIPXbyX1g29jsPNtCHT86Vj/zoXCd6mh7FbJqKOEIuQTGJ
Jrf4UHmFs420x6SbOLIVeEI0jxe6RwAYyZ/hORVqI08QUDyFzEMUVAHYIpxYgyqq
RRxO80HR6zu/ujmpur7fgh/C8H+f+IUV12Lydjx4nTJSvm+OyxR+gHzaTwdFZQwF
h9NYDNm715fBr2dpKqvjxvJ3+rAGTljHdFHjsx31MZ4IcU5Rr48k588+htfUKB/c
bJV7tD7EYFk30a647rxeg+CzmOVl0R6Lr+LE7RagZRg2XgWymiU59zbpkV0snqjt
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361146144059501256063393625732877551760489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 15:39:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 15:39:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28369506110696190782213432860835498439319350190720687862289976516179359222949791548945826375814436646077305643399382627102985409375702262508263891456358317758109895748028057171131701263996066806149369223692520637623490995347617858267465606503496830650033692683378286129050342217540022582383291104121371737450832158147525949776085510140160049880223674263174932749343180077090359433074625123565081795210204634165549700730004736160378731267796823540452398996684406266553586131076295307939245902221988898475611584187125529244174852050182160034541161344490882636723462073029314044569163716160132122286959950745950015253993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eda73ca732bd981e3a27c116a02a9034e54ad43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.allegro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accolade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altagasinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apachecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentleysystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerevel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chobani.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspathways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echostar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpolloloco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonybiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houwire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iderapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agenusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apachecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.capps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.elpolloloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.harmonicinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.immunogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neworiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stevemadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sumologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.altagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.aceragen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bentley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.boltbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chobani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cogentbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.collectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluidigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.grab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.magnachip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.verdantearth.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.accolade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.c4therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ccm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.compasspathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corsair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.echostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.harmonybiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.houwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iderapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pmvpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tattooedchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yield10bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zosanopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfrog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnachipsemiconductorcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcbcholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movementday.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworientaleducationandtechnologygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsetmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneernaturalresourcescompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicinesinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstoneglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shift.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemadden.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategyday.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumologic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattooedchef.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinlimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdantearthtechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yield10bioscienceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zosanopharmacorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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