act.progressnownm.org

Issued by R3

About this certificate

This digital certificate with serial number 03:4a:89:71:c2:a3:e8:2b:d8:4e:bb:4f:e8:c9:b5:e6:ee:24 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=act.progressnownm.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:89:71:c2:a3:e8:2b:d8:4e:bb:4f:e8:c9:b5:e6:ee:24
Serial Number (int): 286700447860171241272092713329559519817252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:59:0a:6f:23:d3:f8:9d:51:cf:af:65:83:ef:e4:f5:2e:39:d2:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:3f:06:6f:0d:97:9c:79:26:f1:01:57:fa:55:cd:65:0f:9d:e5:da
Fingerprint (sha256): 36:4e:92:58:ae:3f:43:aa:d5:be:39:15:7d:51:94:6c:e9:ea:cd:8d:35:3c:62:cc:6d:38:50:00:a4:ce:a0:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate act.progressnownm.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.progressnownm.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.907initiative.org
act.abetterminnesota.org
act.alex-padilla.com
act.ayannapressley.com
act.bcndp.ca
act.beaherofund.com
act.berniesanders.com
act.betterutah.org
act.bowmanforcongress.com
act.cbcpac.org
act.couragecampaign.org
act.cruzyoulose.com
act.defendvotingrights.org
act.demandaction.org
act.demandaplan.org
act.demandjustice.org
act.demandprogress.org
act.democratic-strategy.org
act.dirtroaddems.com
act.dirtroadpac.com
act.dream.org
act.dsausa.org
act.electdemocraticwomen.org
act.everytown.org
act.forarpeople.org
act.forwardtn.org
act.freepress.net
act.fusewashington.org
act.gallegoforarizona.com
act.greennewdealnetwork.org
act.gunsensevoter.org
act.katieporter.com
act.lgbtequalitypac.org
act.lucasformo.com
act.lucaskunce.com
act.markkelly.com
act.medicare4all.org
act.middleforkmt.org
act.momsfedup.org
act.mpowerchange.org
act.nnu.org
act.nomorenames.org
act.novoteleftbehindpac.com
act.one.org
act.ontariondp.ca
act.passmedicareforall.org
act.powerthepolls.org
act.presente.org
act.presenteaction.org
act.progressflorida.org
act.progressnc.org
act.progressnowcolorado.org
act.progressnownm.org
act.protectvoting.org
act.qasimforcongress.org
act.ronbegone.com
act.savedemocracypac.com
act.syrianfamilies.org
act.tammyduckworth.com
act.thedreamcorps.org
act.thesyriacampaign.org
act.thirdbearsolutions.com
act.truthtopowerpac.com
act.votebymailpac.org
act.weareprogressives.org
act.weareultraviolet.org
act.welchforcongress.com
act.welchforvermont.com
act.westopgunviolence.org
act.whitehelmets.org
act.zakforcongress.com
act.zazim.org.il
act2.freepress.net
action.justiceforbreonna.org
action.standupamerica.com
action.wemove.eu
donate.demandaplan.org
donate.gunsensevoter.org
go.bobcasey.com
go.floridadems.org
go.giffords.org
go.justicedemocrats.com
go.peoplepower.aclu.org
go.peoplepower.org
herofund.whitehelmets.org
peoplesconvoy.com
vote.peoplepower.org
web.mercycorps.org
web.mercycorps.org.uk
zaz.im

Other certificates including the domain name progressnownm.org

(limited to 100 certificates)
act.one.org
c3.progressnownm.org
c3.progressnownm.org
act.progressiowa.org
act.boldprogressives.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
action.314actionfund.org
progressnownm.org
act.medicare4all.org
act.ilhanomar.com
act.johnfetterman.com
act.weareultraviolet.org
act.progressnownm.org
peoplesmillion.whitehelmets.org
act.electdemsnow.org
act.colorofchange.org
progressnownm.org
www-default.actionkit.com
act.lucaskunce.com
www-default.actionkit.com
c3.progressnownm.org
progressnownm.org
act.elizabethwarren.com
action.pollinis.org
progressnownm.org
act.jamieraskin.com
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
act.one.org
c3.progressnownm.org
progressnownm.org
progressnownm.org
act.progressnc.org
www-default.actionkit.com
progressnownm.org
tls.automattic.com
www-default.actionkit.com
progressnownm.org
secretmessageforwhatsapp.com
act.pirg.org
act.abwt.org
tls.automattic.com
act.progressga.org
act.ruraldemocratsturnoutfund.com
act.defendvotingrights.org
progressnownm.org
www-default.actionkit.com
www-default.actionkit.com
progressnownm.org
admin.jounco.com
act.ourrevolution.com
act.democratic-strategy.org
progressnownm.org
act.cutcruz.com
act.beaherofund.com
progressnownm.org
act.hillharper.com
act.ourrevolution.com
tls.automattic.com
progressnownm.org
c3.progressnownm.org
bento.dataauchan.fr
act.cbcpac.org
act.leaderswedeserve.com
act.betoorourke.com
c3.progressnownm.org
c3.progressnownm.org
www-default.actionkit.com
progressnownm.org
c3.progressnownm.org
progressnownm.org
act.jamieraskin.com
progressnownm.org
act.ourrevolution.com
www-default.actionkit.com
tls.automattic.com
act.whitehelmets.org
c3.progressnownm.org
act.occupydemocrats.com
www.nowarwithiran.org
c3.progressnownm.org
www-default.actionkit.com

Certificate

The complete raw certificate details for act.progressnownm.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINyDCCDLCgAwIBAgISA0qJccKj6CvYTrtP6Mm15u4kMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTkyMjMyMDNaFw0yNDAzMTgyMjMyMDJaMCAxHjAcBgNVBAMT
FWFjdC5wcm9ncmVzc25vd25tLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAKX824dhv8+il+5h9/grncOtm8AFOn3/SLdP2VuCbv5rgEYty2qhCNDp
k22mObeAP5HK4HZv3lINcpaG4tD2CNQKO06gxWwo+dxSUkPplrDcaATc3tTDm2PT
wumIDd2DRF1eSGmFfG+5S04nOznQBlMDNnSHIin/nm+dC5PNLCbo5h4KsRk5Oj5O
HmyhyL4OOGZv5HUPkny9GgNrVohOfEVoq6H9hkuPOWTl1OAA3qyWxfL0Me2FOUEm
ebTGiaw8vfuQV/D8K/iROuPJtmzb2XuHFJmOLREOb64W96Jm8wDo+A5yPYgB3fnf
FaWDHkk1BFhfoktbKKnehhhH4Oo8GqNjU+vOcOS0ziy/K5oxHXuGS3B3eLqeo9Dn
5aWTScqtXSQ7R0OLX5CdXSLxUYYyGKX/naeUFKe6XDmYgJHkZ+uhBXFByXQP9puN
ckGHX+V9Ra7Z+DO7bQ9OaTLoBVnfuRacL4fgIBAh4SfS6yaJVGriK+eStHKmgQv8
X5qEj9C2lzxaUbL30ovIAQ+YOVC9gPxRP7zYCsuFHfd7mfucHnrzztWBLAxGYg6J
gQL2bshxbloheMgy+HvsE1h03nPa65DQVidHNysYFnqH27vx/JL6wDW2dIdDD4H4
yv5SJWJN1KbWQYSvnlPhTvwgEa9ladYsV4MpUhiXzaRW+I1zzplbAgMBAAGjggno
MIIJ5DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCVZCm8j0/idUc+vZYPv5PUuOdLw
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIH8AYDVR0RBIIH5zCCB+OCFWFjdC45
MDdpbml0aWF0aXZlLm9yZ4IYYWN0LmFiZXR0ZXJtaW5uZXNvdGEub3JnghRhY3Qu
YWxleC1wYWRpbGxhLmNvbYIWYWN0LmF5YW5uYXByZXNzbGV5LmNvbYIMYWN0LmJj
bmRwLmNhghNhY3QuYmVhaGVyb2Z1bmQuY29tghVhY3QuYmVybmllc2FuZGVycy5j
b22CEmFjdC5iZXR0ZXJ1dGFoLm9yZ4IZYWN0LmJvd21hbmZvcmNvbmdyZXNzLmNv
bYIOYWN0LmNiY3BhYy5vcmeCF2FjdC5jb3VyYWdlY2FtcGFpZ24ub3JnghNhY3Qu
Y3J1enlvdWxvc2UuY29tghphY3QuZGVmZW5kdm90aW5ncmlnaHRzLm9yZ4IUYWN0
LmRlbWFuZGFjdGlvbi5vcmeCE2FjdC5kZW1hbmRhcGxhbi5vcmeCFWFjdC5kZW1h
bmRqdXN0aWNlLm9yZ4IWYWN0LmRlbWFuZHByb2dyZXNzLm9yZ4IbYWN0LmRlbW9j
cmF0aWMtc3RyYXRlZ3kub3JnghRhY3QuZGlydHJvYWRkZW1zLmNvbYITYWN0LmRp
cnRyb2FkcGFjLmNvbYINYWN0LmRyZWFtLm9yZ4IOYWN0LmRzYXVzYS5vcmeCHGFj
dC5lbGVjdGRlbW9jcmF0aWN3b21lbi5vcmeCEWFjdC5ldmVyeXRvd24ub3JnghNh
Y3QuZm9yYXJwZW9wbGUub3JnghFhY3QuZm9yd2FyZHRuLm9yZ4IRYWN0LmZyZWVw
cmVzcy5uZXSCFmFjdC5mdXNld2FzaGluZ3Rvbi5vcmeCGWFjdC5nYWxsZWdvZm9y
YXJpem9uYS5jb22CG2FjdC5ncmVlbm5ld2RlYWxuZXR3b3JrLm9yZ4IVYWN0Lmd1
bnNlbnNldm90ZXIub3JnghNhY3Qua2F0aWVwb3J0ZXIuY29tghdhY3QubGdidGVx
dWFsaXR5cGFjLm9yZ4ISYWN0Lmx1Y2FzZm9ybW8uY29tghJhY3QubHVjYXNrdW5j
ZS5jb22CEWFjdC5tYXJra2VsbHkuY29tghRhY3QubWVkaWNhcmU0YWxsLm9yZ4IU
YWN0Lm1pZGRsZWZvcmttdC5vcmeCEWFjdC5tb21zZmVkdXAub3JnghRhY3QubXBv
d2VyY2hhbmdlLm9yZ4ILYWN0Lm5udS5vcmeCE2FjdC5ub21vcmVuYW1lcy5vcmeC
G2FjdC5ub3ZvdGVsZWZ0YmVoaW5kcGFjLmNvbYILYWN0Lm9uZS5vcmeCEWFjdC5v
bnRhcmlvbmRwLmNhghphY3QucGFzc21lZGljYXJlZm9yYWxsLm9yZ4IVYWN0LnBv
d2VydGhlcG9sbHMub3JnghBhY3QucHJlc2VudGUub3JnghZhY3QucHJlc2VudGVh
Y3Rpb24ub3JnghdhY3QucHJvZ3Jlc3NmbG9yaWRhLm9yZ4ISYWN0LnByb2dyZXNz
bmMub3JnghthY3QucHJvZ3Jlc3Nub3djb2xvcmFkby5vcmeCFWFjdC5wcm9ncmVz
c25vd25tLm9yZ4IVYWN0LnByb3RlY3R2b3Rpbmcub3JnghhhY3QucWFzaW1mb3Jj
b25ncmVzcy5vcmeCEWFjdC5yb25iZWdvbmUuY29tghhhY3Quc2F2ZWRlbW9jcmFj
eXBhYy5jb22CFmFjdC5zeXJpYW5mYW1pbGllcy5vcmeCFmFjdC50YW1teWR1Y2t3
b3J0aC5jb22CFWFjdC50aGVkcmVhbWNvcnBzLm9yZ4IYYWN0LnRoZXN5cmlhY2Ft
cGFpZ24ub3JnghphY3QudGhpcmRiZWFyc29sdXRpb25zLmNvbYIXYWN0LnRydXRo
dG9wb3dlcnBhYy5jb22CFWFjdC52b3RlYnltYWlscGFjLm9yZ4IZYWN0LndlYXJl
cHJvZ3Jlc3NpdmVzLm9yZ4IYYWN0LndlYXJldWx0cmF2aW9sZXQub3JnghhhY3Qu
d2VsY2hmb3Jjb25ncmVzcy5jb22CF2FjdC53ZWxjaGZvcnZlcm1vbnQuY29tghlh
Y3Qud2VzdG9wZ3VudmlvbGVuY2Uub3JnghRhY3Qud2hpdGVoZWxtZXRzLm9yZ4IW
YWN0Lnpha2ZvcmNvbmdyZXNzLmNvbYIQYWN0LnphemltLm9yZy5pbIISYWN0Mi5m
cmVlcHJlc3MubmV0ghxhY3Rpb24uanVzdGljZWZvcmJyZW9ubmEub3JnghlhY3Rp
b24uc3RhbmR1cGFtZXJpY2EuY29tghBhY3Rpb24ud2Vtb3ZlLmV1ghZkb25hdGUu
ZGVtYW5kYXBsYW4ub3Jnghhkb25hdGUuZ3Vuc2Vuc2V2b3Rlci5vcmeCD2dvLmJv
YmNhc2V5LmNvbYISZ28uZmxvcmlkYWRlbXMub3Jngg9nby5naWZmb3Jkcy5vcmeC
F2dvLmp1c3RpY2VkZW1vY3JhdHMuY29tghdnby5wZW9wbGVwb3dlci5hY2x1Lm9y
Z4ISZ28ucGVvcGxlcG93ZXIub3JnghloZXJvZnVuZC53aGl0ZWhlbG1ldHMub3Jn
ghFwZW9wbGVzY29udm95LmNvbYIUdm90ZS5wZW9wbGVwb3dlci5vcmeCEndlYi5t
ZXJjeWNvcnBzLm9yZ4IVd2ViLm1lcmN5Y29ycHMub3JnLnVrggZ6YXouaW0wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA7U3d1
Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYyEbBClAAAEAwBGMEQCIExI
EQjtKpCafwP9egc5jt27Q9W1v+R7nAJ+Zxo9Qr66AiB5AUwbsSngs0X6+5am6fZk
EvkFci9uS4Izf8Yw5itOIwB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM
Wjp0AAABjIRsEu4AAAQDAEcwRQIgMPg2f1Pp8EG3TLK0qON6z4Qx48Wr8ZM0zon6
/OAbIIUCIQClcG6UPagL5xgMPCWPoEQpqcLdDyH5+PJQcx1ZbVFDejANBgkqhkiG
9w0BAQsFAAOCAQEAjtvbSz7HazHkQI8XGbXzfXFpxQUkXWn7YZPk//Pk+Izfk+Li
qMJqOkSH+m3IY8Jm3n5gBnH5dHsoDgIzz3HLson2asja8pOHKhDI8m/hWORzP7PN
Bdu4x13PQ1rMJyI72Koime70kX/yXcB2rgSJddENzDR3qjkHyKoDsQud36HNeIuY
mmOzr1ucazTAFiilpEKWfL3d+h2Gx6rgtkBFRq9hinvxbRoPH2Lvm3EWyiqceLxP
wU7haP6QhtRLZke8OGHfItD/bQfee82RG1EKVtWqdLmSc9qE1DVhfni5EWjHpnCw
si2HbtWXxgC66bsRDWE5vGjPUOenKBDUkWesHg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286700447860171241272092713329559519817252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:32:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 22:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.progressnownm.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677170836616795465724972329789770869758697176475005153594323701118513634883708573200686163921009625355568497094202340038350247438112709530652168808287049713993367583655948660679054645127380392851638779091500236328653165406888286625542636061586175815626370162962669359028935624867114443383079194905842792180860969466920318957879025277326471529131019599390863949877302253929225487119326415843132908788176100408361926127275844230137581637196471385562134449091888308272527014438587843613887453025238579958571941608801519758616146359552563779355037697974745802906446387097224832039458319779377070997195449907749189208280906791774991118383425635335257160747954476954643298439426062221972728968257886667943545817834465581386558736819910601570159557945579357236442712348785289479574216091681166826999290298337292746136600623453102665583858930230278692812648887124444435844968389711521197065942242660980934243654403766655325871009407772413346667137769044008911449967160185786816526655452532490627520933520197652294129652837314655294231996196242541055537412795666555949146869861356364070217480999850238630298342015074790345736561386690067174787396198082065241356085353243325067247046909860779226338039160551488765730421304146625669562872273243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25590a6f23d3f89d51cfaf6583efe4f52e39d2f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2023 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.907initiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abetterminnesota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alex-padilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bcndp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.beaherofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betterutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bowmanforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cbcpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cruzyoulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.defendvotingrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.democratic-strategy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroaddems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroadpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dsausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdemocraticwomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.everytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forarpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forwardtn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fusewashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gallegoforarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.greennewdealnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gunsensevoter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.katieporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lgbtequalitypac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.markkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.medicare4all.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.middleforkmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.momsfedup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mpowerchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nomorenames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.novoteleftbehindpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.one.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ontariondp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.passmedicareforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.powerthepolls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presenteaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnowcolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnownm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.protectvoting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ronbegone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.savedemocracypac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.syrianfamilies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.tammyduckworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thedreamcorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thirdbearsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthtopowerpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.votebymailpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.westopgunviolence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zakforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zazim.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act2.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.justiceforbreonna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.standupamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.wemove.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.demandaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.gunsensevoter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.bobcasey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.floridadems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.giffords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.justicedemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaz.im'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c846c10a5000004030046304402204c481108ed2a909a7f03fd7a07398eddbb43d5b5bfe47b9c027e671a3d42beba022079014c1bb129e0b345fafb96a6e9f66412f905722f6e4b82337fc630e62b4e2300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c846c12ee0000040300473045022030f8367f53e9f041b74cb2b4a8e37acf8431e3c5abf19334ce89fafce01b2085022100a5706e943da80be7180c3c258fa04429a9c2dd0f21f9f8f250731d596d51437a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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