thankyou.democrats.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:f2:48:13:24:f7:88:63:13:e2:0a:fd:39:c3:0e:8c:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thankyou.democrats.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:f2:48:13:24:f7:88:63:13:e2:0a:fd:39:c3:0e:8c:1b
Serial Number (int): 309298436572860492972689771133199444773915
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:d9:cc:7c:08:cd:a9:5a:70:05:98:ca:7f:4f:4e:e6:c3:d6:46:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:b6:4e:81:18:fe:dc:98:88:b3:88:29:3d:09:37:ff:43:97:c0:07
Fingerprint (sha256): 13:89:ed:35:a6:98:3b:5d:5b:c0:05:ca:0d:0d:1b:08:b9:fd:2c:a1:d2:00:74:5e:35:5a:6b:45:42:7c:fe:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thankyou.democrats.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thankyou.democrats.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thankyou.democrats.org

Other certificates including the domain name democrats.org

(limited to 100 certificates)
thankyou.democrats.org
www.live.democrats.org
txt.democrats.org
thankyou.democrats.org
*.sanssl-014.bsdtools.com
*.sanssl-014.bsdtools.com
asdc.democrats.org
store.democrats.org
live.democrats.org
txt.democrats.org
democrats.org
asdc.democrats.org
thankyou.democrats.org
democrats.org
fundraising.democrats.org
sni.cloudflaressl.com
*.sanssl-011.bsdtools.com
asdc.democrats.org
txt.democrats.org
www.asdc.democrats.org
thankyou.democrats.org
sni.cloudflaressl.com
go.democrats.org
store.democrats.org
www.asdc.democrats.org
live.democrats.org
dnc-main.edge.bluestate.digital
events.democrats.org
sni.cloudflaressl.com
fileshare.democrats.org
www.live.democrats.org
sni.cloudflaressl.com
www.asdc.democrats.org
democrats.org
clustervan-ddtyb.ngpvanapp.com
clusteroa-khkpu.ngpvanapp.com
sni.cloudflaressl.com
store.democrats.org
dnc-2016.edge.bluestate.digital
store.democrats.org
democrats.org
thankyou.democrats.org
fundraising.democrats.org
store.democrats.org
*.democrats.org
txt.democrats.org
thankyou.democrats.org
raiser.staceyabrams.com
live.democrats.org
sni.cloudflaressl.com
thankyou.democrats.org
*.democrats.org
dnc-2016.edge.bluestate.digital
democrats.org
*.sanssl-014.bsdtools.com
www.live.democrats.org
*.democrats.org
store.democrats.org
thankyou.democrats.org
*.sanssl-014.bsdtools.com
democrats.org
dnc-2016.edge.bluestate.digital
live.democrats.org
democrats.org
txt.democrats.org
store.democrats.org
democrats.org
collegedems.com
click.act.democrats.org
democrats.org
democrats.org
democrats.org
go.democrats.org
store.democrats.org
sni.cloudflaressl.com
collegedems.com
store.democrats.org
txt.democrats.org
live.democrats.org
sni.cloudflaressl.com
events.berniesanders.com
democrats.org
clusteroa-khkpu.ngpvanapp.com
txt.democrats.org
www.asdc.democrats.org
live.democrats.org
action.democrats.org
democrats.org
*.sanssl-011.bsdtools.com
*.sanssl-014.bsdtools.com
democrats.org
dnc-finance.edge.bluestate.digital
*.sanssl-011.bsdtools.com
sni.cloudflaressl.com
www.asdc.democrats.org
*.sanssl-011.bsdtools.com
dnc-marketing.edge.bluestate.digital
democrats.org
www.volunteerfromyourcouch.com
*.democrats.org

Certificate

The complete raw certificate details for thankyou.democrats.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01OgjvmMxrYNWxslSxVb
2tb+mUAIXmwbB02vKH5AP6zpBo6HFuxlBQllYiHA8HX/1bM0z8gAhI88pWK63dY+
HksQbm2UwJJ1e6bXyBaw6IVhF79kqjXlzEnTVHvytmA/K81KD00BeQ18gtWqlz5a
RHqxxiF0EKWZSgEzR745/kpMkPVFXeogXT9b0Q7y9SelUrKHfXJ7O9bYQn4cKg/j
3FZMekYtbPltwtzCLYIOHgfQ3vskvN8UGmJ+ztUdh1s25Epp2lmCzz63y9Io0+ZG
97CvMrMUmPc3dQXtspwqDOcsV8MA2ASOfvE0T8SalBgBng2Iup+rHOdQltbjHB0r
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309298436572860492972689771133199444773915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-30 17:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 17:10:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thankyou.democrats.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26677520448061408498503522960345202358460438356794700107427404764370508918720118258237717761759711145981617504550503322749860972264707470798186232648153130152735746220852051196938471014854302556712111260544096594479002523183470255642882914234365683816556064106372992304650903762587548564226592273210580122918609717249910096726248144028240043594141281064821334217843384705528579291498508075425165359208213124547451531131891537078890470078456350712359655435405006334618731786985500249454099090203807528019208670215221057075847396814805961198680571747614082925358718500837686717385303982339993580149430420002815843576823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0d9cc7c08cda95a700598ca7f4f4ee6c3d64674
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thankyou.democrats.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187d35c65d6000004030046304402203d04584a735bc53d539937825d23217038fb66f083201eb91e0cdb6c27fff6d602207b7624e9e03e1106c47d470908e7c762c1e5630589d97f282ad5bce950a2aa0e007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187d35c662e000004030046304402201752ca8da21efb7cfeab389fb6af9534160a9f2a61010056a81ce3a4b3a1737102202f03217887b6b95995c27dfbac67c6060b498a39e23696884510c8b1099f0023
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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