act.progressmichigan.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:db:5a:69:5c:84:39:04:46:cb:fa:18:44:4d:ae:17:e9 was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=act.progressmichigan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:db:5a:69:5c:84:39:04:46:cb:fa:18:44:4d:ae:17:e9
Serial Number (int): 341935066763399302312881892612022133987305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:ad:11:d2:fb:d1:b0:13:4c:9c:8d:70:74:13:6e:e0:4e:ea:c3:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:04:a2:bc:19:f2:b6:12:fa:11:94:b3:ee:86:c0:99:5c:85:73:9e
Fingerprint (sha256): 72:ba:d9:6b:33:91:91:46:78:3b:f9:5e:d9:63:c3:b5:68:d3:9d:79:77:95:ce:c2:f6:5d:ab:8d:74:20:22:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate act.progressmichigan.org

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.progressmichigan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.alabamavaluesprogress.org
act.albertandp.ca
act.angelaalsobrooks.com
act.boldprogressives.org
act.climatetruth.org
act.colorofchange.org
act.colorofchangepac.org
act.eko.org
act.elizabethwarren.com
act.fightforreform.org
act.forecastthefacts.org
act.johnfetterman.com
act.jontester.com
act.kathyhochul.com
act.kscommonsense.org
act.leaderswedeserve.com
act.nuestropac.com
act.pollinis.org
act.priceofoil.org
act.progressga.org
act.progressiowa.org
act.progressmichigan.org
act.rebuildusa.org
act.sumofus.org
act.vindmanforcongress.com
act.wedefendthevote.org
act.womensmarch.com
action.pollinis.org
actions.pollinis.org
change.institute.global
go.tonyevers.com

Other certificates including the domain name progressmichigan.org

(limited to 100 certificates)
www.sunshinesquad.progressmichigan.org
act.one.org
progressmichiganeducation.org
sni.cloudflaressl.com
act.johnfetterman.com
progressmichigan.org
www-default.actionkit.com
progressmichigan.org
www-default.actionkit.com
thoughtsthenaction.com
www-default.actionkit.com
sunshinesquad.progressmichigan.org
action.wemove.eu
thoughtsthenaction.com
www-default.actionkit.com
webmail.progressmichigan.org
www-default.actionkit.com
betsyandbill.com
workingformichigan.org
webmail.progressmichigan.org
www-default.actionkit.com
progressmichigan.org
act.medicare4all.org
shadyschuette.com
www.fixyourride.progressmichigan.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
act.leftnet.org
www-default.actionkit.com
progressmichiganeducation.org
thoughtsthenaction.com
shadyschuette.com
sunshinesquad.progressmichigan.org
peoplesmillion.whitehelmets.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
progressmichiganeducation.org
progressmichiganeducation.org
www-default.actionkit.com
thoughtsthenaction.com
mail.progressmichigan.com
shadyschuette.com
sni.cloudflaressl.com
act.lucaskunce.com
www-default.actionkit.com
thoughtsthenaction.com
thoughtsthenaction.com
act.elizabethwarren.com
act.campaigntoendqualifiedimmunity.org
action.pollinis.org
sunshinesquad.progressmichigan.org
webmail.secondchances4youth.org
progressmichigan.org
mccd.progressmichigan.org
thoughtsthenaction.com
www-default.actionkit.com
act.one.org
sunshinesquad.progressmichigan.org
progressmichigan.org
progressmichigan.org
mail.snyderfails.com
webmail.progressmichigan.org
sunshinesquad.progressmichigan.org
progressmichigan.com
progressmichigan.org
act.progressnc.org
progressmichigan.org
www-default.actionkit.com
sunshinesquad.progressmichigan.org
www-default.actionkit.com
mail.readymichigan.org
www-default.actionkit.com
progressmichigan.org
www-default.actionkit.com
act.progressmichigan.org
www-default.actionkit.com
progressmichigan.com
sunshinesquad.progressmichigan.org
progressmichigan.org
progressmipoliticalaction.progressmichigan.org
mccd.progressmichigan.org
www.progressmichigan.org
progressmichigan.org
sunshinesquad.progressmichigan.org
www-default.actionkit.com
faithfulamerica.org
michiganlecet.com
sni.cloudflaressl.com
sunshinesquad.progressmichigan.org
thoughtsthenaction.com
www-default.actionkit.com
act.progressga.org
act.ruraldemocratsturnoutfund.com
action.pollinis.org
thoughtsthenaction.com
greatlakesbeacon.org
act.defendvotingrights.org
sunshinesquad.progressmichigan.org
www-default.actionkit.com
www-default.actionkit.com

Certificate

The complete raw certificate details for act.progressmichigan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIojCCB4qgAwIBAgISA+zbWmlchDkERsv6GERNrhfpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTkyMjMyMzFaFw0yNDAzMTgyMjMyMzBaMCMxITAfBgNVBAMT
GGFjdC5wcm9ncmVzc21pY2hpZ2FuLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAOHulCNjon2BNsam3/YqYhfv5WZPea2VtOdYp9721oCxR3etVYlZ
NLI2jOzu+PNTJ6Mio9Jf9J09PzGQ858+hi8abWCmcIMW/gEjkTyXhXF3NuUNmsYJ
2/fGIwpfbyQoj+a+8nN53Pud7BKVXEGr3ppEAEq5X/QQNu6JnZFu+k/szxucviZf
/kFvSZOqcARyc8ayetNIlckREfPomvysHeHM32fmEp8HvHkg7LKKcocFwwt/S4pV
yrMvwdA3MgODwN+u/142OlKacJ9w+WtrWk81ykHaSYibqqHh889JwPFOTLTutBs0
59EA8Qqat/Z0HkZZqM8rDRawSWpNd2BNmnSiLpJbDGL/GLDibiJFNLFhIc7YLfmV
M1UAwcwglVMt/09FpUNwS/VJtSSv8GOcxSqDQCKialuyA4ffJA6CrzzEr37MredO
7TK3lQ271tVw386GSP7HKhDiORU3qo5g6EGHABBD/Pwq2n41HT+cxOJyrzg10dS6
KNV2Y7T/qMNW3mGVZgKbN6UXtWHi2pIAg7d2j16XUmogz5ORw09t/dilLYx5SpBJ
D3vMkggh7y4i3OjRLXimLDHMP73MnLz4VIVsRe3OM4N14yRlNKNky1gJk8D5f3fe
RTjhdIsIgwI/hHyg3tJXLVdGhCcLvjuNKft+ZFoRsDNo8qW9saoVDjtxAgMBAAGj
ggS/MIIEuzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBStEdL70bATTJyNcHQTbuBO
6sNTMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB
BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF
BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIICxQYDVR0RBIICvDCCAriCHWFj
dC5hbGFiYW1hdmFsdWVzcHJvZ3Jlc3Mub3JnghFhY3QuYWxiZXJ0YW5kcC5jYYIY
YWN0LmFuZ2VsYWFsc29icm9va3MuY29tghhhY3QuYm9sZHByb2dyZXNzaXZlcy5v
cmeCFGFjdC5jbGltYXRldHJ1dGgub3JnghVhY3QuY29sb3JvZmNoYW5nZS5vcmeC
GGFjdC5jb2xvcm9mY2hhbmdlcGFjLm9yZ4ILYWN0LmVrby5vcmeCF2FjdC5lbGl6
YWJldGh3YXJyZW4uY29tghZhY3QuZmlnaHRmb3JyZWZvcm0ub3JnghhhY3QuZm9y
ZWNhc3R0aGVmYWN0cy5vcmeCFWFjdC5qb2huZmV0dGVybWFuLmNvbYIRYWN0Lmpv
bnRlc3Rlci5jb22CE2FjdC5rYXRoeWhvY2h1bC5jb22CFWFjdC5rc2NvbW1vbnNl
bnNlLm9yZ4IYYWN0LmxlYWRlcnN3ZWRlc2VydmUuY29tghJhY3QubnVlc3Ryb3Bh
Yy5jb22CEGFjdC5wb2xsaW5pcy5vcmeCEmFjdC5wcmljZW9mb2lsLm9yZ4ISYWN0
LnByb2dyZXNzZ2Eub3JnghRhY3QucHJvZ3Jlc3Npb3dhLm9yZ4IYYWN0LnByb2dy
ZXNzbWljaGlnYW4ub3JnghJhY3QucmVidWlsZHVzYS5vcmeCD2FjdC5zdW1vZnVz
Lm9yZ4IaYWN0LnZpbmRtYW5mb3Jjb25ncmVzcy5jb22CF2FjdC53ZWRlZmVuZHRo
ZXZvdGUub3JnghNhY3Qud29tZW5zbWFyY2guY29tghNhY3Rpb24ucG9sbGluaXMu
b3JnghRhY3Rpb25zLnBvbGxpbmlzLm9yZ4IXY2hhbmdlLmluc3RpdHV0ZS5nbG9i
YWyCEGdvLnRvbnlldmVycy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgor
BgEEAdZ5AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r
OdiEcwAAAYyEbH6MAAAEAwBIMEYCIQCzZrrQUh2Rf46z2e4LhtzW7upPrWXJFTUb
i6xaaxTpsAIhAJrz9iumXrMmC2mKW8O31QA/rpC30zKnbELogoNqnCATAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMhGx+nQAABAMARzBFAiEA
9WILpOIq7waVb8oEEak9A4ni28rZwLHh9qRsKMSmDMcCICKimyOnom1IAU8yYI9L
g/L7HTu6b2Bp4F8tanQQ6mCbMA0GCSqGSIb3DQEBCwUAA4IBAQAJzwBTY2ywDoL/
X5xyoVa3YwLcDY3SnoCtCIj88TuAfkX6Q7JRShb5udk4WbdBEfvcV6Yt1aYe5S7T
H3AFHEQ7mW6cB50C1Surfe6VBWOPPFuhdImPRc/eOdFsB25W5s/aBGowiCQ3xMvY
F9TOvDGWlLDe0lFLoBf4HkoRSN21dxuzrMNfNixKAXqibVoMNICn6mx5WPC01tUE
RI/UeX7YhG2hmTTSXqBdQJRfQMWFrHEkZjo1rs47LyXTxHcRYbd+PA+tLdWNz1Tn
GKnNGP8sbzHgqM3VD2wrL9S/XdZDYontcbCrJm1IdnBuwGRKK1Q88heveWCXj592
EzNXNrif
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341935066763399302312881892612022133987305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 22:32:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 22:32:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.progressmichigan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921721931067842461356022109424094269073292676823228313513218562972034176297448117739591654494820566324120711755656011211943136930464456804885671778175959865160179833536641313913815900027147129418447745610446883972690018487883759982456809374464941653386041113446202678433879562992821405597835011443308910999157656942540693474923359294484071466542411516603011862769624699533783520005003415435347199979813187809259651356985695745415619247922872772026026005334493849090850079971251046785802480263984896543787029342479600058789085425308078336934412471196830744075174067675872250331390899313399509135686943261765233488292901315168927053892749931970302015492539047266542537905504593354486837279427203478241025713126770116277666801802693347149479096303641548746498492397942054501727790546400046753035956276090825301764817670321454544023704449099911725329321248455721205524132353584262670547396093489760695244726073630043032926564378864972939310786047536788565759958250787833384012238478358861541287401314252399206266041588348890654161900267594185582538488104800105886613936800177839954027602745692233958039836165070504842260700630550168008709560284891812154845937602190508507912799888820236041073136965010778693354872899043433092509294541681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14ad11d2fbd1b0134c9c8d7074136ee04eeac353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alabamavaluesprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.albertandp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.angelaalsobrooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.climatetruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchangepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.eko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.elizabethwarren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fightforreform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forecastthefacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.johnfetterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jontester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kathyhochul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kscommonsense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.leaderswedeserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nuestropac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pollinis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.priceofoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.rebuildusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.vindmanforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.wedefendthevote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.womensmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.pollinis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actions.pollinis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'change.institute.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.tonyevers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c846c7e8c0000040300483046022100b366bad0521d917f8eb3d9ee0b86dcd6eeea4fad65c915351b8bac5a6b14e9b00221009af3f62ba65eb3260b698a5bc3b7d5003fae90b7d332a76c42e882836a9c20130076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c846c7e9d0000040300473045022100f5620ba4e22aef06956fca0411a93d0389e2dbcad9c0b1e1f6a46c28c4a60cc7022022a29b23a7a26d48014f32608f4b83f2fb1d3bba6f6069e05f2d6a7410ea609b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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