act.progressnownm.org
Issued by R3
About this certificate
This digital certificate with serial number 03:4a:89:71:c2:a3:e8:2b:d8:4e:bb:4f:e8:c9:b5:e6:ee:24 was issued on by Let's Encrypt.
With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=act.progressnownm.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4a:89:71:c2:a3:e8:2b:d8:4e:bb:4f:e8:c9:b5:e6:ee:24Serial Number (int): 286700447860171241272092713329559519817252
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 25:59:0a:6f:23:d3:f8:9d:51:cf:af:65:83:ef:e4:f5:2e:39:d2:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7a:3f:06:6f:0d:97:9c:79:26:f1:01:57:fa:55:cd:65:0f:9d:e5:da
Fingerprint (sha256): 36:4e:92:58:ae:3f:43:aa:d5:be:39:15:7d:51:94:6c:e9:ea:cd:8d:35:3c:62:cc:6d:38:50:00:a4:ce:a0:20
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate act.progressnownm.org
90
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for act.progressnownm.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
act.907initiative.org
act.abetterminnesota.org
act.alex-padilla.com
act.ayannapressley.com
act.bcndp.ca
act.beaherofund.com
act.berniesanders.com
act.betterutah.org
act.bowmanforcongress.com
act.cbcpac.org
act.couragecampaign.org
act.cruzyoulose.com
act.defendvotingrights.org
act.demandaction.org
act.demandaplan.org
act.demandjustice.org
act.demandprogress.org
act.democratic-strategy.org
act.dirtroaddems.com
act.dirtroadpac.com
act.dream.org
act.dsausa.org
act.electdemocraticwomen.org
act.everytown.org
act.forarpeople.org
act.forwardtn.org
act.freepress.net
act.fusewashington.org
act.gallegoforarizona.com
act.greennewdealnetwork.org
act.gunsensevoter.org
act.katieporter.com
act.lgbtequalitypac.org
act.lucasformo.com
act.lucaskunce.com
act.markkelly.com
act.medicare4all.org
act.middleforkmt.org
act.momsfedup.org
act.mpowerchange.org
act.nnu.org
act.nomorenames.org
act.novoteleftbehindpac.com
act.one.org
act.ontariondp.ca
act.passmedicareforall.org
act.powerthepolls.org
act.presente.org
act.presenteaction.org
act.progressflorida.org
act.progressnc.org
act.progressnowcolorado.org
act.progressnownm.org
act.protectvoting.org
act.qasimforcongress.org
act.ronbegone.com
act.savedemocracypac.com
act.syrianfamilies.org
act.tammyduckworth.com
act.thedreamcorps.org
act.thesyriacampaign.org
act.thirdbearsolutions.com
act.truthtopowerpac.com
act.votebymailpac.org
act.weareprogressives.org
act.weareultraviolet.org
act.welchforcongress.com
act.welchforvermont.com
act.westopgunviolence.org
act.whitehelmets.org
act.zakforcongress.com
act.zazim.org.il
act2.freepress.net
action.justiceforbreonna.org
action.standupamerica.com
action.wemove.eu
donate.demandaplan.org
donate.gunsensevoter.org
go.bobcasey.com
go.floridadems.org
go.giffords.org
go.justicedemocrats.com
go.peoplepower.aclu.org
go.peoplepower.org
herofund.whitehelmets.org
peoplesconvoy.com
vote.peoplepower.org
web.mercycorps.org
web.mercycorps.org.uk
zaz.im
act.abetterminnesota.org
act.alex-padilla.com
act.ayannapressley.com
act.bcndp.ca
act.beaherofund.com
act.berniesanders.com
act.betterutah.org
act.bowmanforcongress.com
act.cbcpac.org
act.couragecampaign.org
act.cruzyoulose.com
act.defendvotingrights.org
act.demandaction.org
act.demandaplan.org
act.demandjustice.org
act.demandprogress.org
act.democratic-strategy.org
act.dirtroaddems.com
act.dirtroadpac.com
act.dream.org
act.dsausa.org
act.electdemocraticwomen.org
act.everytown.org
act.forarpeople.org
act.forwardtn.org
act.freepress.net
act.fusewashington.org
act.gallegoforarizona.com
act.greennewdealnetwork.org
act.gunsensevoter.org
act.katieporter.com
act.lgbtequalitypac.org
act.lucasformo.com
act.lucaskunce.com
act.markkelly.com
act.medicare4all.org
act.middleforkmt.org
act.momsfedup.org
act.mpowerchange.org
act.nnu.org
act.nomorenames.org
act.novoteleftbehindpac.com
act.one.org
act.ontariondp.ca
act.passmedicareforall.org
act.powerthepolls.org
act.presente.org
act.presenteaction.org
act.progressflorida.org
act.progressnc.org
act.progressnowcolorado.org
act.progressnownm.org
act.protectvoting.org
act.qasimforcongress.org
act.ronbegone.com
act.savedemocracypac.com
act.syrianfamilies.org
act.tammyduckworth.com
act.thedreamcorps.org
act.thesyriacampaign.org
act.thirdbearsolutions.com
act.truthtopowerpac.com
act.votebymailpac.org
act.weareprogressives.org
act.weareultraviolet.org
act.welchforcongress.com
act.welchforvermont.com
act.westopgunviolence.org
act.whitehelmets.org
act.zakforcongress.com
act.zazim.org.il
act2.freepress.net
action.justiceforbreonna.org
action.standupamerica.com
action.wemove.eu
donate.demandaplan.org
donate.gunsensevoter.org
go.bobcasey.com
go.floridadems.org
go.giffords.org
go.justicedemocrats.com
go.peoplepower.aclu.org
go.peoplepower.org
herofund.whitehelmets.org
peoplesconvoy.com
vote.peoplepower.org
web.mercycorps.org
web.mercycorps.org.uk
zaz.im
Other certificates including the domain name progressnownm.org
(limited to 100 certificates)
act.one.org
c3.progressnownm.org
c3.progressnownm.org
act.progressiowa.org
act.boldprogressives.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
action.314actionfund.org
progressnownm.org
act.medicare4all.org
act.ilhanomar.com
act.johnfetterman.com
act.weareultraviolet.org
act.progressnownm.org
peoplesmillion.whitehelmets.org
act.electdemsnow.org
act.colorofchange.org
progressnownm.org
www-default.actionkit.com
act.lucaskunce.com
www-default.actionkit.com
c3.progressnownm.org
progressnownm.org
act.elizabethwarren.com
action.pollinis.org
progressnownm.org
act.jamieraskin.com
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
act.one.org
c3.progressnownm.org
progressnownm.org
progressnownm.org
act.progressnc.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
www-default.actionkit.com
progressnownm.org
secretmessageforwhatsapp.com
act.pirg.org
act.abwt.org
tls.automattic.com
act.progressga.org
act.ruraldemocratsturnoutfund.com
act.defendvotingrights.org
progressnownm.org
www-default.actionkit.com
www-default.actionkit.com
progressnownm.org
admin.jounco.com
act.ourrevolution.com
act.democratic-strategy.org
progressnownm.org
act.cutcruz.com
act.beaherofund.com
progressnownm.org
act.hillharper.com
act.ourrevolution.com
tls.automattic.com
progressnownm.org
c3.progressnownm.org
bento.dataauchan.fr
act.cbcpac.org
act.leaderswedeserve.com
act.betoorourke.com
c3.progressnownm.org
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
c3.progressnownm.org
progressnownm.org
act.jamieraskin.com
progressnownm.org
act.ourrevolution.com
www-default.actionkit.com
tls.automattic.com
act.whitehelmets.org
c3.progressnownm.org
act.occupydemocrats.com
www.nowarwithiran.org
c3.progressnownm.org
www-default.actionkit.com
c3.progressnownm.org
c3.progressnownm.org
act.progressiowa.org
act.boldprogressives.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
action.314actionfund.org
progressnownm.org
act.medicare4all.org
act.ilhanomar.com
act.johnfetterman.com
act.weareultraviolet.org
act.progressnownm.org
peoplesmillion.whitehelmets.org
act.electdemsnow.org
act.colorofchange.org
progressnownm.org
www-default.actionkit.com
act.lucaskunce.com
www-default.actionkit.com
c3.progressnownm.org
progressnownm.org
act.elizabethwarren.com
action.pollinis.org
progressnownm.org
act.jamieraskin.com
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
act.one.org
c3.progressnownm.org
progressnownm.org
progressnownm.org
act.progressnc.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
www-default.actionkit.com
progressnownm.org
secretmessageforwhatsapp.com
act.pirg.org
act.abwt.org
tls.automattic.com
act.progressga.org
act.ruraldemocratsturnoutfund.com
act.defendvotingrights.org
progressnownm.org
www-default.actionkit.com
www-default.actionkit.com
progressnownm.org
admin.jounco.com
act.ourrevolution.com
act.democratic-strategy.org
progressnownm.org
act.cutcruz.com
act.beaherofund.com
progressnownm.org
act.hillharper.com
act.ourrevolution.com
tls.automattic.com
progressnownm.org
c3.progressnownm.org
bento.dataauchan.fr
act.cbcpac.org
act.leaderswedeserve.com
act.betoorourke.com
c3.progressnownm.org
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
c3.progressnownm.org
progressnownm.org
act.jamieraskin.com
progressnownm.org
act.ourrevolution.com
www-default.actionkit.com
tls.automattic.com
act.whitehelmets.org
c3.progressnownm.org
act.occupydemocrats.com
www.nowarwithiran.org
c3.progressnownm.org
www-default.actionkit.com
Certificate
The complete raw certificate details for act.progressnownm.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINyDCCDLCgAwIBAgISA0qJccKj6CvYTrtP6Mm15u4kMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTkyMjMyMDNaFw0yNDAzMTgyMjMyMDJaMCAxHjAcBgNVBAMT FWFjdC5wcm9ncmVzc25vd25tLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAKX824dhv8+il+5h9/grncOtm8AFOn3/SLdP2VuCbv5rgEYty2qhCNDp k22mObeAP5HK4HZv3lINcpaG4tD2CNQKO06gxWwo+dxSUkPplrDcaATc3tTDm2PT wumIDd2DRF1eSGmFfG+5S04nOznQBlMDNnSHIin/nm+dC5PNLCbo5h4KsRk5Oj5O HmyhyL4OOGZv5HUPkny9GgNrVohOfEVoq6H9hkuPOWTl1OAA3qyWxfL0Me2FOUEm ebTGiaw8vfuQV/D8K/iROuPJtmzb2XuHFJmOLREOb64W96Jm8wDo+A5yPYgB3fnf FaWDHkk1BFhfoktbKKnehhhH4Oo8GqNjU+vOcOS0ziy/K5oxHXuGS3B3eLqeo9Dn 5aWTScqtXSQ7R0OLX5CdXSLxUYYyGKX/naeUFKe6XDmYgJHkZ+uhBXFByXQP9puN ckGHX+V9Ra7Z+DO7bQ9OaTLoBVnfuRacL4fgIBAh4SfS6yaJVGriK+eStHKmgQv8 X5qEj9C2lzxaUbL30ovIAQ+YOVC9gPxRP7zYCsuFHfd7mfucHnrzztWBLAxGYg6J gQL2bshxbloheMgy+HvsE1h03nPa65DQVidHNysYFnqH27vx/JL6wDW2dIdDD4H4 yv5SJWJN1KbWQYSvnlPhTvwgEa9ladYsV4MpUhiXzaRW+I1zzplbAgMBAAGjggno MIIJ5DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCVZCm8j0/idUc+vZYPv5PUuOdLw MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIH8AYDVR0RBIIH5zCCB+OCFWFjdC45 MDdpbml0aWF0aXZlLm9yZ4IYYWN0LmFiZXR0ZXJtaW5uZXNvdGEub3JnghRhY3Qu YWxleC1wYWRpbGxhLmNvbYIWYWN0LmF5YW5uYXByZXNzbGV5LmNvbYIMYWN0LmJj bmRwLmNhghNhY3QuYmVhaGVyb2Z1bmQuY29tghVhY3QuYmVybmllc2FuZGVycy5j b22CEmFjdC5iZXR0ZXJ1dGFoLm9yZ4IZYWN0LmJvd21hbmZvcmNvbmdyZXNzLmNv bYIOYWN0LmNiY3BhYy5vcmeCF2FjdC5jb3VyYWdlY2FtcGFpZ24ub3JnghNhY3Qu Y3J1enlvdWxvc2UuY29tghphY3QuZGVmZW5kdm90aW5ncmlnaHRzLm9yZ4IUYWN0 LmRlbWFuZGFjdGlvbi5vcmeCE2FjdC5kZW1hbmRhcGxhbi5vcmeCFWFjdC5kZW1h bmRqdXN0aWNlLm9yZ4IWYWN0LmRlbWFuZHByb2dyZXNzLm9yZ4IbYWN0LmRlbW9j cmF0aWMtc3RyYXRlZ3kub3JnghRhY3QuZGlydHJvYWRkZW1zLmNvbYITYWN0LmRp cnRyb2FkcGFjLmNvbYINYWN0LmRyZWFtLm9yZ4IOYWN0LmRzYXVzYS5vcmeCHGFj dC5lbGVjdGRlbW9jcmF0aWN3b21lbi5vcmeCEWFjdC5ldmVyeXRvd24ub3JnghNh Y3QuZm9yYXJwZW9wbGUub3JnghFhY3QuZm9yd2FyZHRuLm9yZ4IRYWN0LmZyZWVw cmVzcy5uZXSCFmFjdC5mdXNld2FzaGluZ3Rvbi5vcmeCGWFjdC5nYWxsZWdvZm9y YXJpem9uYS5jb22CG2FjdC5ncmVlbm5ld2RlYWxuZXR3b3JrLm9yZ4IVYWN0Lmd1 bnNlbnNldm90ZXIub3JnghNhY3Qua2F0aWVwb3J0ZXIuY29tghdhY3QubGdidGVx dWFsaXR5cGFjLm9yZ4ISYWN0Lmx1Y2FzZm9ybW8uY29tghJhY3QubHVjYXNrdW5j ZS5jb22CEWFjdC5tYXJra2VsbHkuY29tghRhY3QubWVkaWNhcmU0YWxsLm9yZ4IU YWN0Lm1pZGRsZWZvcmttdC5vcmeCEWFjdC5tb21zZmVkdXAub3JnghRhY3QubXBv d2VyY2hhbmdlLm9yZ4ILYWN0Lm5udS5vcmeCE2FjdC5ub21vcmVuYW1lcy5vcmeC G2FjdC5ub3ZvdGVsZWZ0YmVoaW5kcGFjLmNvbYILYWN0Lm9uZS5vcmeCEWFjdC5v bnRhcmlvbmRwLmNhghphY3QucGFzc21lZGljYXJlZm9yYWxsLm9yZ4IVYWN0LnBv d2VydGhlcG9sbHMub3JnghBhY3QucHJlc2VudGUub3JnghZhY3QucHJlc2VudGVh Y3Rpb24ub3JnghdhY3QucHJvZ3Jlc3NmbG9yaWRhLm9yZ4ISYWN0LnByb2dyZXNz bmMub3JnghthY3QucHJvZ3Jlc3Nub3djb2xvcmFkby5vcmeCFWFjdC5wcm9ncmVz c25vd25tLm9yZ4IVYWN0LnByb3RlY3R2b3Rpbmcub3JnghhhY3QucWFzaW1mb3Jj b25ncmVzcy5vcmeCEWFjdC5yb25iZWdvbmUuY29tghhhY3Quc2F2ZWRlbW9jcmFj eXBhYy5jb22CFmFjdC5zeXJpYW5mYW1pbGllcy5vcmeCFmFjdC50YW1teWR1Y2t3 b3J0aC5jb22CFWFjdC50aGVkcmVhbWNvcnBzLm9yZ4IYYWN0LnRoZXN5cmlhY2Ft cGFpZ24ub3JnghphY3QudGhpcmRiZWFyc29sdXRpb25zLmNvbYIXYWN0LnRydXRo dG9wb3dlcnBhYy5jb22CFWFjdC52b3RlYnltYWlscGFjLm9yZ4IZYWN0LndlYXJl cHJvZ3Jlc3NpdmVzLm9yZ4IYYWN0LndlYXJldWx0cmF2aW9sZXQub3JnghhhY3Qu d2VsY2hmb3Jjb25ncmVzcy5jb22CF2FjdC53ZWxjaGZvcnZlcm1vbnQuY29tghlh Y3Qud2VzdG9wZ3VudmlvbGVuY2Uub3JnghRhY3Qud2hpdGVoZWxtZXRzLm9yZ4IW YWN0Lnpha2ZvcmNvbmdyZXNzLmNvbYIQYWN0LnphemltLm9yZy5pbIISYWN0Mi5m cmVlcHJlc3MubmV0ghxhY3Rpb24uanVzdGljZWZvcmJyZW9ubmEub3JnghlhY3Rp b24uc3RhbmR1cGFtZXJpY2EuY29tghBhY3Rpb24ud2Vtb3ZlLmV1ghZkb25hdGUu ZGVtYW5kYXBsYW4ub3Jnghhkb25hdGUuZ3Vuc2Vuc2V2b3Rlci5vcmeCD2dvLmJv YmNhc2V5LmNvbYISZ28uZmxvcmlkYWRlbXMub3Jngg9nby5naWZmb3Jkcy5vcmeC F2dvLmp1c3RpY2VkZW1vY3JhdHMuY29tghdnby5wZW9wbGVwb3dlci5hY2x1Lm9y Z4ISZ28ucGVvcGxlcG93ZXIub3JnghloZXJvZnVuZC53aGl0ZWhlbG1ldHMub3Jn ghFwZW9wbGVzY29udm95LmNvbYIUdm90ZS5wZW9wbGVwb3dlci5vcmeCEndlYi5t ZXJjeWNvcnBzLm9yZ4IVd2ViLm1lcmN5Y29ycHMub3JnLnVrggZ6YXouaW0wEwYD VR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA7U3d1 Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYyEbBClAAAEAwBGMEQCIExI EQjtKpCafwP9egc5jt27Q9W1v+R7nAJ+Zxo9Qr66AiB5AUwbsSngs0X6+5am6fZk EvkFci9uS4Izf8Yw5itOIwB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM Wjp0AAABjIRsEu4AAAQDAEcwRQIgMPg2f1Pp8EG3TLK0qON6z4Qx48Wr8ZM0zon6 /OAbIIUCIQClcG6UPagL5xgMPCWPoEQpqcLdDyH5+PJQcx1ZbVFDejANBgkqhkiG 9w0BAQsFAAOCAQEAjtvbSz7HazHkQI8XGbXzfXFpxQUkXWn7YZPk//Pk+Izfk+Li qMJqOkSH+m3IY8Jm3n5gBnH5dHsoDgIzz3HLson2asja8pOHKhDI8m/hWORzP7PN Bdu4x13PQ1rMJyI72Koime70kX/yXcB2rgSJddENzDR3qjkHyKoDsQud36HNeIuY mmOzr1ucazTAFiilpEKWfL3d+h2Gx6rgtkBFRq9hinvxbRoPH2Lvm3EWyiqceLxP wU7haP6QhtRLZke8OGHfItD/bQfee82RG1EKVtWqdLmSc9qE1DVhfni5EWjHpnCw si2HbtWXxgC66bsRDWE5vGjPUOenKBDUkWesHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApfzbh2G/z6KX7mH3+Cud w62bwAU6ff9It0/ZW4Ju/muARi3LaqEI0OmTbaY5t4A/kcrgdm/eUg1ylobi0PYI 1Ao7TqDFbCj53FJSQ+mWsNxoBNze1MObY9PC6YgN3YNEXV5IaYV8b7lLTic7OdAG UwM2dIciKf+eb50Lk80sJujmHgqxGTk6Pk4ebKHIvg44Zm/kdQ+SfL0aA2tWiE58 RWirof2GS485ZOXU4ADerJbF8vQx7YU5QSZ5tMaJrDy9+5BX8Pwr+JE648m2bNvZ e4cUmY4tEQ5vrhb3ombzAOj4DnI9iAHd+d8VpYMeSTUEWF+iS1soqd6GGEfg6jwa o2NT685w5LTOLL8rmjEde4ZLcHd4up6j0OflpZNJyq1dJDtHQ4tfkJ1dIvFRhjIY pf+dp5QUp7pcOZiAkeRn66EFcUHJdA/2m41yQYdf5X1Frtn4M7ttD05pMugFWd+5 Fpwvh+AgECHhJ9LrJolUauIr55K0cqaBC/xfmoSP0LaXPFpRsvfSi8gBD5g5UL2A /FE/vNgKy4Ud93uZ+5weevPO1YEsDEZiDomBAvZuyHFuWiF4yDL4e+wTWHTec9rr kNBWJ0c3KxgWeofbu/H8kvrANbZ0h0MPgfjK/lIlYk3UptZBhK+eU+FO/CARr2Vp 1ixXgylSGJfNpFb4jXPOmVsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286700447860171241272092713329559519817252 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:32:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 22:32:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.progressnownm.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677170836616795465724972329789770869758697176475005153594323701118513634883708573200686163921009625355568497094202340038350247438112709530652168808287049713993367583655948660679054645127380392851638779091500236328653165406888286625542636061586175815626370162962669359028935624867114443383079194905842792180860969466920318957879025277326471529131019599390863949877302253929225487119326415843132908788176100408361926127275844230137581637196471385562134449091888308272527014438587843613887453025238579958571941608801519758616146359552563779355037697974745802906446387097224832039458319779377070997195449907749189208280906791774991118383425635335257160747954476954643298439426062221972728968257886667943545817834465581386558736819910601570159557945579357236442712348785289479574216091681166826999290298337292746136600623453102665583858930230278692812648887124444435844968389711521197065942242660980934243654403766655325871009407772413346667137769044008911449967160185786816526655452532490627520933520197652294129652837314655294231996196242541055537412795666555949146869861356364070217480999850238630298342015074790345736561386690067174787396198082065241356085353243325067247046909860779226338039160551488765730421304146625669562872273243 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 25590a6f23d3f89d51cfaf6583efe4f52e39d2f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2023 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.907initiative.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abetterminnesota.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alex-padilla.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bcndp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.beaherofund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betterutah.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bowmanforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cbcpac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cruzyoulose.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.defendvotingrights.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaction.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaplan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandjustice.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandprogress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.democratic-strategy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroaddems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroadpac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dream.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dsausa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdemocraticwomen.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.everytown.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forarpeople.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forwardtn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.freepress.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fusewashington.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gallegoforarizona.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.greennewdealnetwork.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gunsensevoter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.katieporter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lgbtequalitypac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.markkelly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.medicare4all.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.middleforkmt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.momsfedup.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mpowerchange.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nnu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nomorenames.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.novoteleftbehindpac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.one.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ontariondp.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.passmedicareforall.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.powerthepolls.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presente.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presenteaction.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnowcolorado.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnownm.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.protectvoting.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ronbegone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.savedemocracypac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.syrianfamilies.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.tammyduckworth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thedreamcorps.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thirdbearsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthtopowerpac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.votebymailpac.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareprogressives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforvermont.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.westopgunviolence.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.whitehelmets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zakforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zazim.org.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act2.freepress.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.justiceforbreonna.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.standupamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.wemove.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.demandaplan.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.gunsensevoter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.bobcasey.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.floridadems.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.giffords.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.justicedemocrats.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.aclu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.peoplepower.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaz.im' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c846c10a5000004030046304402204c481108ed2a909a7f03fd7a07398eddbb43d5b5bfe47b9c027e671a3d42beba022079014c1bb129e0b345fafb96a6e9f66412f905722f6e4b82337fc630e62b4e2300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c846c12ee0000040300473045022030f8367f53e9f041b74cb2b4a8e37acf8431e3c5abf19334ce89fafce01b2085022100a5706e943da80be7180c3c258fa04429a9c2dd0f21f9f8f250731d596d51437a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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