aflciotechinstitute.org

Issued by R3

About this certificate

This digital certificate with serial number 04:14:1e:09:79:a6:e9:17:db:db:d8:fb:4f:5c:12:8c:6c:01 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aflciotechinstitute.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:1e:09:79:a6:e9:17:db:db:d8:fb:4f:5c:12:8c:6c:01
Serial Number (int): 355294717103400606015454818899053886860289
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:20:7e:b2:b7:e5:de:5a:10:be:43:c7:81:82:3f:5d:81:5e:fb:47
Fingerprint (sha256): 34:14:69:e5:84:ef:d7:82:b4:40:10:35:5d:93:ab:9f:3a:fd:f0:1c:5d:2e:5e:07:56:66:28:7d:5f:82:f8:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aflciotechinstitute.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aflciotechinstitute.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aflciotechinstitute.org
aflciovotes.org
ak.aflcio.org
al.aflcio.org
alaflcio.com
aprimaine.org
ar.aflcio.org
arkansasafl-cio.com
austinlaborcouncil.org
az.aflcio.org
azaflcio.org
ca.aflcio.org
cdalf.org
charmcitylabor.org
cmaflcio.org
cnylabor.org
cnylaborcouncil.org
co.aflcio.org
coaflcio.org
coastalbendaflcio.org
ct.aflcio.org
ctaflcio.org
cwclc.org
dc.aflcio.org
de.aflcio.org
demo.aflcio.org
denverlabor.org
easternctalf.org
fl.aflcio.org
ga.aflcio.org
gblc.us
gsmlaborcouncil.org
hhalf.org
hi.aflcio.org
hvalf.org
ia.aflcio.org
id.aflcio.org
idahoafl-cio.org
il.aflcio.org
in.aflcio.org
inaflcio.org
iowaaflcio.org
knowledgebase.aflcio.org
ks.aflcio.org
ky.aflcio.org
la.aflcio.org
laborcouncil.org
laborforbiden.org
laborsouthflorida.org
longislandfed.org
ma.aflcio.org
maineaflcio.org
massaflcio.org
mbclc.org
md.aflcio.org
mddc.aflcio.org
mddclabor.org
me.aflcio.org
mi.aflcio.org
milaborpress.org
mlk18.aflcio.org
mlk2018.aflcio.org
mn.aflcio.org
mo.aflcio.org
moaflcio.org
ms.aflcio.org
msaflcio.org
mt.aflcio.org
nashvilleclc.org
ndaflcio.org
neaflcio.org
nealcmn.org
nmfl.org
nnclc.org
northshoreaflcio.org
nslaborcouncil.com
nysaflcio.org
paaflcio.org
pbtcaflcio.org
philaflcio.org
roclaborfed.org
scaflcio.org
semnalc.org
sialf.org
swflabor.org
tcclc.org
texasaflcio.org
themlkconference.org
tnaflcio.org
toolsfororganizers.com
toolsfororganizers.org
unionconstructioncareers.org
uplabor.com
uprlf.com
utahaflcio.org
va-aflcio.org
wcflc.org
westernctalf.org
wisaflcio.org

Other certificates including the domain name aflciotechinstitute.org

(limited to 100 certificates)
aflciotechinstitute.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflciotechinstitute.org
aflcionc.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflcionc.org
aflciotechinstitute.org
aflcionc.org
aflcionc.org
aflciotechinstitute.org
aflcionc.org
aflciotechinstitute.org

Certificate

The complete raw certificate details for aflciotechinstitute.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355294717103400606015454818899053886860289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 17:31:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 17:31:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aflciotechinstitute.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflciotechinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflciovotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaflcio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasafl-cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinlaborcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdalf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charmcitylabor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnylabor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnylaborcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalbendaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverlabor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternctalf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gblc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsmlaborcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhalf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvalf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahoafl-cio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ks.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ky.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborforbiden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborsouthflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandfed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maineaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'md.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mddc.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mddclabor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milaborpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlk18.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlk2018.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mn.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvilleclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nealcmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoreaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nslaborcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nysaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbtcaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roclaborfed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semnalc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sialf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swflabor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themlkconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolsfororganizers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolsfororganizers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionconstructioncareers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uplabor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uprlf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahaflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va-aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcflc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernctalf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisaflcio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5dce098b00000403004730450221009a56ec6898e7a87d9c7a9e615bd91f9aae56a855ea0ca8ecc9a3996555ca10d202201563f81a1dc0c552702d01a9bee400b6c86563a1634e1e683d173d238063a30b007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b5dce097c000004030046304402206e6cf3ec1d1505daf0852ae9f4957d1dcad4a3372a85b18e846142024f1e4d3802200e7a151eeea89739392d91dab09ef75c9aeb474045a5d4e36a69cc3db686806c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028a51dd0227bec7c19931dbb9e7a7d3aad7d705d02434cfab777144fe5c659c8398fc7c0006a7b0a4fccb1290e23354477babbafa8e51b35500416067f11396893a22258d448ad7fbcf5fab7761f2b9dab4195dad399cde7a2aaf9e15eb1feb21708a2d54a0b71bbe0c433d0ef0e1311d42b4c4b8d5556c81b327e8c892a02e52b263759cd5902b4a724b9c507eced3a9a99ca3f57047660bdf24de27ea5f3b1c3e4d287578875ad239cd63451370de1e80c77945ba16a057aca262856b27ab9a68c31eff0aeec1544d10506d522ddf383895b6d43fad01e14c952acf325b1ab64db75ce98661b237ce42b3e7c06618e2c3e2cc325bfadfd86c092df58373363