act.lucaskunce.com

Issued by R11

About this certificate

This digital certificate with serial number 03:9d:15:ba:9d:ef:e0:b7:de:00:5c:8c:16:af:c4:a0:d1:48 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=act.lucaskunce.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9d:15:ba:9d:ef:e0:b7:de:00:5c:8c:16:af:c4:a0:d1:48
Serial Number (int): 314790072160338634953109830439231136256328
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:b5:fc:09:e7:b7:78:93:35:fb:ac:52:c0:0e:e7:2a:12:f4:5f:74
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 92:18:3b:6c:88:8c:75:f1:35:0b:df:80:35:08:bf:bd:13:a0:e0:0c
Fingerprint (sha256): 45:2d:47:49:73:07:b8:5e:58:28:4e:cf:41:d4:3a:0e:9b:a8:98:cd:c8:d7:52:34:50:19:dc:b5:b1:9b:4a:03

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate act.lucaskunce.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.lucaskunce.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act-cftest.moveon.org
act.907initiative.org
act.abetterminnesota.org
act.abwt.org
act.adamschiff.com
act.advancemaryland.org
act.albertandp.ca
act.angelaalsobrooks.com
act.animalprotectionpac.com
act.ayannapressley.com
act.battlebornprogress.org
act.bcndp.ca
act.bluesenate.com
act.bluewaveamerica.com
act.boldpac.com
act.boldprogressives.org
act.chrismurphy.com
act.colorofchange.org
act.colorofchangepac.org
act.commonwealthcommunications.org
act.couragecampaign.org
act.coworker.org
act.coworkerfund.org
act.cutcruz.com
act.eko.org
act.electdemocraticwomen.org
act.faithfulamerica.org
act.fcnl.org
act.forarpeople.org
act.friendsplacedc.org
act.gbc-education.org
act.kathyhochul.com
act.leaderswedeserve.com
act.losecruzpac.com
act.lucasformo.com
act.lucaskunce.com
act.medicare4all.org
act.michaeltubbsforca.com
act.middleforkmt.org
act.moveon.org
act.nnu.org
act.nuestropac.com
act.peoplesconvoy.com
act.pramilaforcongress.com
act.pro-choicemajority.org
act.prochoicewomen.org
act.progressga.org
act.progressmichigan.org
act.progressnc.org
act.progressnownm.org
act.progressva.org
act.qasimforcongress.org
act.robbonta.com
act.squadvictoryfund.com
act.sumofus.org
act.syrianfamilies.org
act.theirworld.org
act.thesyriacampaign.org
act.truthafterisis.org
act.vindmanforcongress.com
act.weareprogressives.org
act.weareultraviolet.org
act.wedefendthevote.org
act.welchforcongress.com
act.welchforvermont.com
act.whitehelmets.org
act.zakforcongress.com
action.ameripacfund.com
action.justiceforbreonna.org
action.momsrising.org
electionhouseparties.org
faithfulamerica.com
faithfulamerica.org
go.giffords.org
go.justicedemocrats.com
go.peoplepower.aclu.org
go.peoplepower.org
herofund.whitehelmets.org
peoplesconvoy.com
peoplesmillion.whitehelmets.org
vote.nnu.org
vote.peoplepower.org
web.mercycorps.org
www.crisisresponse.us
www.electionhouseparties.org
www.faithfulamerica.org
www.impeach.org
www.nowarwithiran.org
www.savethepostoffice.net
www.trumpisnotabovethelaw.org

Other certificates including the domain name lucaskunce.com

(limited to 100 certificates)
action.standupamerica.com
act.ayannapressley.com
action.wemove.eu
action.314actionfund.org
act.dirtroaddems.com
act.leftnet.org
www-default.actionkit.com
act.progressnownm.org
*.lucaskunce.com
lucaskunce.com
act.hillharper.com
act.colorofchange.org
*.lucaskunce.com
act.lucaskunce.com
act.campaigntoendqualifiedimmunity.org
lucaskunce.com
lucaskunce.com
act.jamieraskin.com
act.one.org
lucaskunce.com
www-default.actionkit.com
*.lucaskunce.com
act.realjusticepac.org
faithfulamerica.org
act.forarpeople.org
act.pirg.org
act.abwt.org
lucaskunce.com
lucaskunce.com
lucaskunce.com
action.pollinis.org
act.democratic-strategy.org
go.tonyevers.com
go.giffords.org
act.hillharper.com
act.ourrevolution.com
act.gavinnewsom.com
action.standupamerica.com
act.dsausa.org
lucaskunce.com
act.bcndp.ca
act.fusewashington.org
www.nowarwithiran.org
act.qasimforcongress.org

Certificate

The complete raw certificate details for act.lucaskunce.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314790072160338634953109830439231136256328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 23:32:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-09 23:32:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.lucaskunce.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804026402195674489520047344882238917536982636168458012525656067817498423145868290310291136000397272273454567105844494810173456792627637412597384213589379227367627701106986456596414762498900143472569744251987731705923474254051595004625613718135673132500709818175645168370180718580745022006793230086829918645130726649860191590477994605563586782813798937799042670703191586305416111539167978339233728798465837981367849688132103476046494354751841549217646357561100863584663579602029098897234987658453073957614745689531601641395574315345032961422596557612857101331140509676144719116509064294142821393368686650713955750954051250133763435909005926933612171815304136635428556852277100889200740385565166972186390944471320243315105611198633729522467682648165022492039762069257521118664651844681998964491260015001111384286875747917359146559350084827848693971881728223032312866641720261166080147680450426363653927155329409787859476028073475473147986417558673084734485598750661789092122388363946760078319576856074864418899911902663595734641889501765254161800133779838427574345325636843352743246766806115999593612176071480061178108764222695750868981231627773156675289064823526718361376644494301417786228973327575908423167141685778711368571688153611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34b5fc09e7b7789335fbac52c00ee72a12f45f74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2069 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-cftest.moveon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.907initiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abetterminnesota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abwt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.adamschiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.advancemaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.albertandp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.angelaalsobrooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.animalprotectionpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.battlebornprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bcndp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bluesenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bluewaveamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.chrismurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchangepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.commonwealthcommunications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.coworker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.coworkerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cutcruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.eko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdemocraticwomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.faithfulamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fcnl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forarpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.friendsplacedc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gbc-education.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kathyhochul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.leaderswedeserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.losecruzpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.medicare4all.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.michaeltubbsforca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.middleforkmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.moveon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nuestropac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pramilaforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pro-choicemajority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.prochoicewomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnownm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.robbonta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.squadvictoryfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.syrianfamilies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.theirworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthafterisis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.vindmanforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.wedefendthevote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zakforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ameripacfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.justiceforbreonna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.momsrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electionhouseparties.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfulamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfulamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.giffords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.justicedemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesmillion.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.nnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crisisresponse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electionhouseparties.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithfulamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowarwithiran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savethepostoffice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumpisnotabovethelaw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019009dca6fb00000403004830460221009ee034a3a8394cbe5112f4bb64fa154e6107f698dc5c9bcb4538a18e601677d8022100d2272f4df3c7b138efa013ae9a9396986e24c8ab159652ff6cbcb7faf7f04a4600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019009dca757000004030047304502205c67d2816e668f8bc1f2afa42273c1d4ead6148a346ec7687cc9f059e33111a90221009648518c5f54727c0a81186ccefd0e4bc1a6fdb4b60dc28aabdbee092175a145
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f79447b8539a12d754669d30e8a9ec4c56ab185f6ca4bfcb266f0f7de18d0e0d96e6b159d03f7f6f7f0afbb4bdeb7b474821522992e24856080cc556c1397ffc31249d6333b05f033d26838118fed252fad5b0a370815e8190c1b7ec58b8f20c6ba149bc004b66033ceedd375d48e7f3855e167029615c11f800bd4bb4c6b3d5488e7b9836dd462b564f3e920ef598f1d7133b087c8ba006c61062bdfa798406b23e4690588099f8f9b9322e7d310e600fa70a11500b3047ac6d1ee9e68b6342ca5b2cfa5368a16faf12fd6e2f011cb7ac1bf9972f4cf6c9b90047b41764400ef2d5b891a9cd6daf8a5c5c7b91bbaee4101299f1bebd1890f89d8fcc911b941