leapfrog-ssl-34.gcs-web.com

Issued by R3

About this certificate

This digital certificate with serial number 04:71:93:1a:56:45:10:bf:c5:a8:9a:4d:c2:aa:7d:5d:53:c9 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leapfrog-ssl-34.gcs-web.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:93:1a:56:45:10:bf:c5:a8:9a:4d:c2:aa:7d:5d:53:c9
Serial Number (int): 387096584453964890222625082636172198237129
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:59:ab:e9:2e:54:65:3f:cd:72:e5:f0:ed:5b:bf:66:85:b5:19:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:eb:77:1e:91:f4:d1:6d:c5:50:b6:f8:e2:c4:7e:1f:ca:8d:d7:92
Fingerprint (sha256): fd:a0:7c:60:27:a7:e9:bd:c1:d4:54:64:56:61:07:fd:f3:4e:20:5a:39:c5:da:bd:fb:2a:e6:79:a7:89:d5:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leapfrog-ssl-34.gcs-web.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leapfrog-ssl-34.gcs-web.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.allegro.eu
accolade.gcs-web.com
agenusbio.gcs-web.com
allegro.gcs-web.com
altagasinvestorday.gcs-web.com
apachecorp.gcs-web.com
avidbio.gcs-web.com
bentleysystems.gcs-web.com
boltbiotherapeutics.gcs-web.com
c4therapeutics.gcs-web.com
capps.gcs-web.com
cerevel.gcs-web.com
chobani.gcs-web.com
cogentbiosciences.gcs-web.com
collectors.gcs-web.com
compasspathways.gcs-web.com
concordmedical.gcs-web.com
corsair.gcs-web.com
echostar.gcs-web.com
elpolloloco.gcs-web.com
fluidigm.gcs-web.com
grab.gcs-web.com
greendot.gcs-web.com
harmonicinc.gcs-web.com
harmonybiosciences.gcs-web.com
houwire.gcs-web.com
iderapharmaceuticalsinc.gcs-web.com
immunogen.gcs-web.com
investor.agenusbio.com
investor.apachecorp.com
investor.apacorp.com
investor.capps.com
investor.elpolloloco.com
investor.harmonicinc.com
investor.immunogen.com
investor.neworiental.org
investor.stevemadden.com
investor.sumologic.com
investor.textainer.com
investorday.altagas.com
investors.bentley.com
investors.boltbio.com
investors.cerevel.com
investors.chobani.com
investors.cogentbio.com
investors.collectors.com
investors.fluidigm.com
investors.grab.com
investors.magnachip.com
investors.mastercraft.com
investors.outsetmedical.com
investors.pxd.com
investors.shift.com
investors.verdantearth.tech
ir.accolade.com
ir.avidbio.com
ir.c4therapeutics.com
ir.ccm.cn
ir.compasspathways.com
ir.corsair.com
ir.echostar.com
ir.greendot.com
ir.harmonybiosciences.com
ir.houwire.com
ir.iderapharma.com
ir.pmvpharma.com
ir.qudian.com
ir.tattooedchef.com
ir.vivus.com
ir.xin.com
ir.yield10bio.com
ir.zosanopharma.com
jfrog.gcs-web.com
leapfrog-ssl-34.gcs-web.com
magnachipsemiconductorcorp.gcs-web.com
mcbcholdingsinc.gcs-web.com
meritorincinvestorday.gcs-web.com
movementday.praxismedicines.com
neworientaleducationandtechnologygroupinc.gcs-web.com
outsetmedicalinc.gcs-web.com
pioneernaturalresourcescompany.gcs-web.com
pmvpharma.gcs-web.com
praxismedicinesinvestorday.gcs-web.com
qudianinc.gcs-web.com
shareholders.stepstoneglobal.com
shareholders.stepstonegroup.com
shift.gcs-web.com
stepstonegroupinc.gcs-web.com
stevemadden.gcs-web.com
strategyday.meritor.com
sumologic.gcs-web.com
tattooedchef.gcs-web.com
textainergroupholdingsltd.gcs-web.com
uxinlimited.gcs-web.com
verdantearthtechnologies.gcs-web.com
vivusinc.gcs-web.com
yield10bioscienceinc.gcs-web.com
zosanopharmacorporation.gcs-web.com

Other certificates including the domain name gcs-web.com

(limited to 100 certificates)
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-5.gcs-web.com
investor.ciena.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-29.gcs-web.com
leapfrog-ssl-47.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-33.gcs-web.com
leapfrog-ssl-3.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-35.gcs-web.com
leapfrog-ssl-21.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-56.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-54.gcs-web.com
leapfrog-ssl-30.gcs-web.com
leapfrog-ssl-17.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-45.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-7.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-39.gcs-web.com
leapfrog-ssl-53.gcs-web.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-30.gcs-web.com
test-ba-qa.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-57.gcs-web.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-26.gcs-web.com
leapfrog-ssl-32.gcs-web.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-16.gcs-web.com
leapfrog-ssl-22.gcs-web.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-8.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-51.gcs-web.com
leapfrog-ssl-10.gcs-web.com
leapfrog-ssl-46.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-6.gcs-web.com
leapfrog-ssl.nasdaq.com
leapfrog-ssl-39.gcs-web.com
www.notified.com
leapfrog-ssl-31.gcs-web.com
leapfrog-ssl-41.gcs-web.com
leapfrog-ssl-55.gcs-web.com
leapfrog-ssl-52.gcs-web.com
leapfrog-ssl-48.gcs-web.com
leapfrog-ssl-40.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-38.gcs-web.com
leapfrog-ssl-20.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-2.gcs-web.com

Certificate

The complete raw certificate details for leapfrog-ssl-34.gcs-web.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudwynhbp62EZJRGfAW19
SKWOXKAPgyxtGdUTITFT/lFmhsf7CbOwo6MLYnX/O5BNON0vKl6RkamSdx+lFwdn
ZFgOBTGqhd/V+XMA3VAnAiAW0n3fxELgihjZdO3V1o2mcjmsEpgZxPb8VPMzQJym
N0pHcm+bW2agL1EAOd3UxcbeETtZ9Fa1n46eihTy8MqVvpfYQGjtbF2sICLWyjKp
M9M+uU6NE2RQUZCsVP7aojB9FLOKCm1/FK2AykCXRMhIZ9CML2MRT9cSlLxmGZJc
WvT2RaqCEkL1fzPMn8n9seOWNkkfOn5qyg6spN+4ztDNSYcAeHWXE5EsUqn7Emdj
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387096584453964890222625082636172198237129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 14:37:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 14:37:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23462669963761403476399579131399409645117561199096666875796807965092050249787679601061218842308427074546007189020430960475738016251182291819281769355133375539099807263415119066266779639451416736906605113083595974670329620337334731263242042167809831698271931244404578583507043541028139307944538617837721962995226072500339440781221991361720689326406870044558651987972668951264579898470893725173906620676395065611028907712756415002426420566794059321739168688492031698645570662097289454573494142068919024019597534224851176633857840922162898910590827855354531742521218890192350060448617650382641685128427144537999044731903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6559abe92e54653fcd72e5f0ed5bbf6685b51953
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.allegro.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accolade.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenusbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegro.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altagasinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apachecorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avidbio.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentleysystems.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boltbiotherapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4therapeutics.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capps.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerevel.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chobani.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogentbiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspathways.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concordmedical.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsair.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echostar.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpolloloco.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidigm.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grab.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendot.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonicinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonybiosciences.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houwire.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iderapharmaceuticalsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunogen.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.agenusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apachecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.apacorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.capps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.elpolloloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.harmonicinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.immunogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.neworiental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.stevemadden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.sumologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.textainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorday.altagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.bentley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.boltbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cerevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.chobani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.cogentbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.collectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.fluidigm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.grab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.magnachip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mastercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.pxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.shift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.verdantearth.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.accolade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.avidbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.c4therapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.ccm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.compasspathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.corsair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.echostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.greendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.harmonybiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.houwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.iderapharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.pmvpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.qudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.tattooedchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.vivus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.xin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.yield10bio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.zosanopharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jfrog.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leapfrog-ssl-34.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnachipsemiconductorcorp.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcbcholdingsinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritorincinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movementday.praxismedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworientaleducationandtechnologygroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsetmedicalinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneernaturalresourcescompany.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmvpharma.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxismedicinesinvestorday.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudianinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstoneglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareholders.stepstonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shift.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepstonegroupinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemadden.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategyday.meritor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumologic.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattooedchef.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textainergroupholdingsltd.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxinlimited.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdantearthtechnologies.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivusinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yield10bioscienceinc.gcs-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zosanopharmacorporation.gcs-web.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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