action.standupamerica.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0f:f4:ab:06:80:0a:64:43:13:b3:01:33:84:0a:28:70:e1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=action.standupamerica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:f4:ab:06:80:0a:64:43:13:b3:01:33:84:0a:28:70:e1
Serial Number (int): 266766312944668024303513299063033737801953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:2e:4b:cc:e5:a9:47:5e:87:61:48:89:e2:20:f3:4e:46:5f:e2:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:13:56:e7:69:f5:3b:bc:05:82:ab:9d:68:52:7c:bf:92:25:89:bc
Fingerprint (sha256): 04:0a:bf:b6:79:68:cb:6f:45:63:a4:9b:d1:a3:50:70:95:5c:b4:a5:70:d8:aa:5e:e0:b0:30:9f:6e:5e:72:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate action.standupamerica.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for action.standupamerica.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.350.org
act.350actionfund.org
act.907initiative.org
act.abetterminnesota.org
act.abwt.org
act.advancemaryland.org
act.alabamavaluesprogress.org
act.beaherofund.com
act.berniesanders.com
act.betterutah.org
act.boldpac.com
act.boldprogressives.org
act.bradypac.org
act.campaigntoendqualifiedimmunity.org
act.cbcpac.org
act.chrismurphy.com
act.climatetruth.org
act.couragecampaign.org
act.defendvotingrights.org
act.demandjustice.org
act.dirtroaddems.com
act.dirtroadpac.com
act.dream.org
act.dsausa.org
act.eko.org
act.electdemocraticwomen.org
act.electdiversedems.org
act.elizabethwarren.com
act.forecastthefacts.org
act.forwardtn.org
act.gbc-education.org
act.globalpowerup.org
act.gofossilfree.org
act.hillharper.com
act.johnfetterman.com
act.kairosfellows.org
act.kathyhochul.com
act.kscommonsense.org
act.lateefahsimon.com
act.latinovictory.org
act.leaderswedeserve.com
act.lgbtequalitypac.org
act.lucasformo.com
act.lucaskunce.com
act.mandelabarnes.com
act.momsfedup.org
act.mpowerchange.org
act.novoteleftbehindpac.com
act.nuestropac.com
act.ocasiocortez.com
act.one.org
act.peoplesconvoy.com
act.pfaw.org
act.prairieactionnd.org
act.presente.org
act.presenteaction.org
act.priceofoil.org
act.prochoicewomen.org
act.progressarizona.org
act.progressflorida.org
act.progressivetakeover.org
act.progressnow.org
act.qasimforcongress.org
act.savedemocracypac.com
act.summerforpa.com
act.sumofus.org
act.tammyduckworth.com
act.thedreamcorps.org
act.theirworld.org
act.thesyriacampaign.org
act.thirdbearsolutions.com
act.truthafterisis.org
act.votebymailpac.org
act.votevets.org
act.weareprogressives.org
act.weareultraviolet.org
act.wedefendthevote.org
act.welchforcongress.com
act.welchforvermont.com
act.whitehelmets.org
act.winwithoutwar.org
action.ameripacfund.com
action.justiceforbreonna.org
action.standupamerica.com
action.storyofstuff.org
go.floridadems.org
go.giffords.org
herofund.whitehelmets.org
join.theintercept.com
peoplesconvoy.com

Other certificates including the domain name standupamerica.com

(limited to 100 certificates)
sni81176.cloudflaressl.com
standupamerica.com
standupamerica.com
*.sanssl-001.bsdtools.com
sni81176.cloudflaressl.com
act.one.org
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
action.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
www-default.actionkit.com
shop.standupamerica.com
sni81176.cloudflaressl.com
act.ayannapressley.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
standupamerica.com
standup-main.edge.bluestate.digital
standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
act.boldprogressives.org
standup-main.edge.bluestate.digital
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
act.medicare4all.org
sni.cloudflaressl.com
act.ilhanomar.com
act.leftnet.org
*.sanssl-001.bsdtools.com
shop.standupamerica.com
sni81176.cloudflaressl.com
www-default.actionkit.com
standupamerica.com
sni81176.cloudflaressl.com
act.progressnownm.org
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
*.sanssl-001.bsdtools.com
sni81176.cloudflaressl.com
www.standupamerica.com
act.hillharper.com
act.electdemsnow.org
act.colorofchange.org
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
shop.standupamerica.com
*.sanssl-001.bsdtools.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
act.elizabethwarren.com
shop.standupamerica.com
sni81176.cloudflaressl.com
shop.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
www.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
shop.standupamerica.com
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com
standup-main.edge.bluestate.digital
sni81176.cloudflaressl.com
sni81176.cloudflaressl.com

Certificate

The complete raw certificate details for action.standupamerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266766312944668024303513299063033737801953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 22:31:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 22:31:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'action.standupamerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630049971362486547966403049524605311394079906952411195315163333590719531281792126174409452698071719417156171931994930227775773795673510153287188396093100820768425972198200540246520117429714442667005517262389976935062681986548200085724934767229699207017507075028805776530714587920368228277606867561027594960389265260870847642688961377156949129007779173494227176116199514045519182248610742457690416473961367010387072179207391406086336345546398078994217894489039941676253697267396706633276158442865485106552395239390871026081985928737800873149217431063801815452747706151245503651731166743030986798105667381077639057232665985989749247129939616677566825356742004508944838042635070962698067104584336976223834307294400036010016672147872671998017070880710811152776942009206324805578324504277572840701097518851943621829962641477707742466610036744557976140589787685017131346192356659071921198821390755574725682748028617823642697622997302048732892218424476533386870437076370860089088971249668100979607578991309662748366473224648742690545518301287727306091666301501083900540012662024406168948992148445001605223308662327860487557151877432473589332108549794079818000879926616449167801526838986262179365809710366936478449160026839132128545798472393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f62e4bcce5a9475e87614889e220f34e465fe275
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.350.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.350actionfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.907initiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abetterminnesota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abwt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.advancemaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alabamavaluesprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.beaherofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betterutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bradypac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.campaigntoendqualifiedimmunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cbcpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.chrismurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.climatetruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.defendvotingrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroaddems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroadpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dsausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.eko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdemocraticwomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdiversedems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.elizabethwarren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forecastthefacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forwardtn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gbc-education.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.globalpowerup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gofossilfree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.hillharper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.johnfetterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kairosfellows.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kathyhochul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kscommonsense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lateefahsimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.latinovictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.leaderswedeserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lgbtequalitypac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mandelabarnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.momsfedup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mpowerchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.novoteleftbehindpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nuestropac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ocasiocortez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.one.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pfaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.prairieactionnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presenteaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.priceofoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.prochoicewomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressarizona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressivetakeover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.savedemocracypac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.summerforpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.tammyduckworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thedreamcorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.theirworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thirdbearsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthafterisis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.votebymailpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.votevets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.wedefendthevote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.winwithoutwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ameripacfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.justiceforbreonna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.standupamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.storyofstuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.floridadems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.giffords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.theintercept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c184618ba000004030047304502204d039e895dc580ed87e04a50d53c97844809cc39bbd9778d0811017b81f10917022100ed6e3e350c18c3c7365c758c0c3cfabcc6e78fb1011bb6e8e8d4e98c05b3bffc007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c184618d8000004030046304402207a97670538ef26444a90fdf17249c49e62c350379165b332fd77d9b3f7677e1f02207e34d871e9e606fb2a85f75ba8e9c9a50c2cdd270c2c6a6e960ddb904939dfb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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