platform.sparkinfluence.net
Issued by R3
About this certificate
This digital certificate with serial number 04:4f:2d:cc:94:5a:19:28:3f:24:d9:a6:26:06:34:7e:84:da was issued on by Let's Encrypt.
With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=platform.sparkinfluence.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4f:2d:cc:94:5a:19:28:3f:24:d9:a6:26:06:34:7e:84:daSerial Number (int): 375392328211099529266417269347703016293594
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1b:4a:3b:cb:41:2f:2b:5e:02:a0:94:93:52:97:33:b0:48:61:92:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0f:48:da:f3:fd:bc:25:b4:27:9b:a1:db:20:db:11:58:8f:23:60:e1
Fingerprint (sha256): 12:5e:40:39:dd:1d:01:8b:c3:d3:50:85:78:ae:5b:78:13:56:8c:b9:72:51:48:c5:f2:b5:6d:99:23:0f:41:d2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate platform.sparkinfluence.net
32
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for platform.sparkinfluence.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
act.physiciansgrassrootsnetwork.org
action.appfairness.org
action.blochforirving.com
action.cancersupportcommunity.org
action.lungevity.org
action.openplans.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.kidney.org
advocacy.massmutual.com
givetoadpac.ada.org
groundswellstrat.com
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.faircompactforall.com
www.magnasvoice.com
www.makeurvoiceheard.com
www.ridapac.org
www.savehealthcareinwa.org
www.spiritsunited.org
www.voicesofcdpap.com
action.appfairness.org
action.blochforirving.com
action.cancersupportcommunity.org
action.lungevity.org
action.openplans.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.kidney.org
advocacy.massmutual.com
givetoadpac.ada.org
groundswellstrat.com
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.faircompactforall.com
www.magnasvoice.com
www.makeurvoiceheard.com
www.ridapac.org
www.savehealthcareinwa.org
www.spiritsunited.org
www.voicesofcdpap.com
Other certificates including the domain name sparkinfluence.net
(limited to 100 certificates)
platform.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
Certificate
The complete raw certificate details for platform.sparkinfluence.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIATCCBumgAwIBAgISBE8tzJRaGSg/JNmmJgY0foTaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjkxNjM2MTJaFw0yNDA2MjcxNjM2MTFaMCYxJDAiBgNVBAMT G3BsYXRmb3JtLnNwYXJraW5mbHVlbmNlLm5ldDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALWyclAeg8Q48czmDpG2u0kuRMqIScDl3pgbgiCWph6DmzwG 29rhVcPUa9wRLpruKrHL5AK5MkpQquufW1I5RnimO+pOf5Twbt2SkgrKqRYm7NXY 2CYxKyw6ANI5lSagkGvr4vfKhqwL80MJEGVybWe/zBi4Z4bjPr8Lq/q52DDk2IEb YADK0AMJ9f6yREAFzG0MUDKe6N8UCttWJgpkOfOhui2rCUH1oIPAXBUStuwkk3zt XtyINVLhCRXKowuqWvTj77moFbltyvLsaVLLOL32rkHrdAnWOYsumcZFk6OVk1Ik Z1TQFFMr5Vy/YQcn0ikP/y3sqeFwkqOeaCwfeyMCAwEAAaOCBRswggUXMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUG0o7y0EvK14CoJSTUpczsEhhkrswHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wggMjBgNVHREEggMaMIIDFoIjYWN0LnBoeXNpY2lhbnNn cmFzc3Jvb3RzbmV0d29yay5vcmeCFmFjdGlvbi5hcHBmYWlybmVzcy5vcmeCGWFj dGlvbi5ibG9jaGZvcmlydmluZy5jb22CIWFjdGlvbi5jYW5jZXJzdXBwb3J0Y29t bXVuaXR5Lm9yZ4IUYWN0aW9uLmx1bmdldml0eS5vcmeCFGFjdGlvbi5vcGVucGxh bnMub3JnghlhY3Rpb24ucGVvcGxlZm9yYmlrZXMub3JnghphY3Rpb24ucHJvZ3Jl c3NjaGFtYmVyLm9yZ4IZYWN0aW9uLnJpZGVyc2FsbGlhbmNlLm9yZ4IWYWN0aW9u LnZpbnlsc2lkaW5nLm9yZ4ITYWN0aW9uLndpbGxpYW1zLmNvbYITYWR2b2NhY3ku a2lkbmV5Lm9yZ4IXYWR2b2NhY3kubWFzc211dHVhbC5jb22CE2dpdmV0b2FkcGFj LmFkYS5vcmeCFGdyb3VuZHN3ZWxsc3RyYXQuY29tghxtYWduYS5hY3Rpb24ubWFn bmFzdm9pY2UuY29tghRtYWtldXJ2b2ljZWhlYXJkLmNvbYIbcGxhdGZvcm0uc3Bh cmtpbmZsdWVuY2UubmV0ghZzYXZlaGVhbHRoY2FyZWlud2Eub3Jngh9zcGFyay5z YXZlYm9zdG9uc3dhdGVyZnJvbnQuY29tgg91c2dyLnNtaXRocy5jb22CEXZvaWNl cy5raWRuZXkub3JnghF3d3cuYWFob2EtcGFjLmNvbYIYd3d3LmF1dG9jYXJlYWR2 b2NhY3kub3JnghV3d3cuYm9hdGluZ3VuaXRlZC5vcmeCGXd3dy5mYWlyY29tcGFj dGZvcmFsbC5jb22CE3d3dy5tYWduYXN2b2ljZS5jb22CGHd3dy5tYWtldXJ2b2lj ZWhlYXJkLmNvbYIPd3d3LnJpZGFwYWMub3Jnghp3d3cuc2F2ZWhlYWx0aGNhcmVp bndhLm9yZ4IVd3d3LnNwaXJpdHN1bml0ZWQub3JnghV3d3cudm9pY2Vzb2ZjZHBh cC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY6LSJGSAAAE AwBHMEUCIQDYa+LSUAhP8jh3tfKDQR0PTs+dIuosfPwcVvz6wGzALAIgM0ZTe+Am juqjX/csECVbEZLqxhVZUqzY/ri1dy01aFsAdQCi4r/WHt4vLweg1k5tN6fcZUOw xrUuotq3iviabfUX2AAAAY6LSJG+AAAEAwBGMEQCIBbTHOy/3FI+hoXRrry3zNZA nraqkdOHsFHx+o4izHqJAiAlxSVZz9aQWNURgDqX61FJOhFD39vD0y0NiuAvyJ/n dzANBgkqhkiG9w0BAQsFAAOCAQEAjNbTMyPs5MwcTA6HV+DBSNjsU0GvzImD1PtB qghMoYxaWeyjsKxgOzy28Q4UbyN+nFTNNiAX0X2z55CgnG7eoArt2v61f3xrvN9A fjnmrWdto61OwLLVhcFQsvnqF1pC58LvmZsK24o2+R0WyVBNiJrTXpT04Qp7fipo JhZiLZjiI5iuu4XO6PuR/emEDymcCOfAu+xh5LE6seiuWXyfrYW9JayDLb32MoUa WNMZaTnxannWtsamFHe3F7bnv/EUqkjTEhHRLAaH+HYEogkjsb065StIp74E1r3M ThO87sFnWHoM+rCR//vsQ37PkopsdLR+mmsDXQXxERNNoCXHPw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbJyUB6DxDjxzOYOkba7 SS5EyohJwOXemBuCIJamHoObPAbb2uFVw9Rr3BEumu4qscvkArkySlCq659bUjlG eKY76k5/lPBu3ZKSCsqpFibs1djYJjErLDoA0jmVJqCQa+vi98qGrAvzQwkQZXJt Z7/MGLhnhuM+vwur+rnYMOTYgRtgAMrQAwn1/rJEQAXMbQxQMp7o3xQK21YmCmQ5 86G6LasJQfWgg8BcFRK27CSTfO1e3Ig1UuEJFcqjC6pa9OPvuagVuW3K8uxpUss4 vfauQet0CdY5iy6ZxkWTo5WTUiRnVNAUUyvlXL9hByfSKQ//Leyp4XCSo55oLB97 IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 375392328211099529266417269347703016293594 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 16:36:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 16:36:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.sparkinfluence.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22937128464904409768284882307970890818407612889012418816430861393735164825061219910485759802095532436281784806607391186158799794152654054403416257485441573392735433323529671357611177976965922143598466450955332192477443324108368455133305681029608841009874207450885708806392300599756639658848673143832880337415339629623913933924382992568537699232238347881904670029002526506385514447338330445242654915022927767294591213134964347892184695578556709282809198969012619715893847623358725936506461187475450803730238666871128551398008769383577292061298083168943835175104623556911665578961343919652477742631947928454480474897187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1b4a3bcb412f2b5e02a09493529733b0486192bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (794 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.physiciansgrassrootsnetwork.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.appfairness.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.blochforirving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.cancersupportcommunity.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.lungevity.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.openplans.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.peopleforbikes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.progresschamber.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ridersalliance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.vinylsiding.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.williams.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.kidney.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.massmutual.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetoadpac.ada.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundswellstrat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magna.action.magnasvoice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeurvoiceheard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.sparkinfluence.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savehealthcareinwa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.savebostonswaterfront.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgr.smiths.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.kidney.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahoa-pac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocareadvocacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatingunited.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircompactforall.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasvoice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeurvoiceheard.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridapac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savehealthcareinwa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritsunited.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voicesofcdpap.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e8b4891920000040300473045022100d86be2d250084ff23877b5f283411d0f4ecf9d22ea2c7cfc1c56fcfac06cc02c02203346537be0268eeaa35ff72c10255b1192eac6155952acd8feb8b5772d35685b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e8b4891be0000040300463044022016d31cecbfdc523e8685d1aebcb7ccd6409eb6aa91d387b051f1fa8e22cc7a89022025c52559cfd69058d511803a97eb51493a1143dfdbc3d32d0d8ae02fc89fe777 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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