act.ayannapressley.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cb:40:be:ec:97:ca:a5:d6:3d:44:f9:f3:64:f1:f9:a5:f6 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=act.ayannapressley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cb:40:be:ec:97:ca:a5:d6:3d:44:f9:f3:64:f1:f9:a5:f6
Serial Number (int): 417612526138799686360584839904691782002166
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:f5:fc:4d:44:1a:57:ca:bf:1e:cb:ca:05:54:28:29:8f:5e:9f:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:25:7e:06:36:c5:4f:e7:3a:cf:11:92:32:fd:52:aa:5c:19:ad:89
Fingerprint (sha256): 90:3a:5d:91:e3:71:a8:aa:c9:84:2a:d6:2a:8c:e2:dd:2f:af:fc:31:5f:33:97:f2:bf:70:a4:13:80:d4:e2:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate act.ayannapressley.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.ayannapressley.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.andrewromanoff.com
act.ayannapressley.com
act.progressivetakeover.org
act.realjusticepac.org
act.rokhanna.com
act.sumofus.org
act.theirworld.org
act.thesyriacampaign.org
act.weareultraviolet.org
act.winwithoutwar.org
act.yang2020.com
act.zazim.org.il
action.storyofstuff.org
action.turnoutpac.org
herofund.whitehelmets.org
peoplesconvoy.com
peoplesmillion.whitehelmets.org

Other certificates including the domain name ayannapressley.com

(limited to 100 certificates)
act.one.org
act.onewisconsinnow.org
act.johnfetterman.com
act.progressiowa.org
act.fusewashington.org
act.ayannapressley.com
ayannapressley.com
act.presenteaction.org
www-default.actionkit.com
ayanna-full.veracitymedia.xyz
ayanna-full.veracitymedia.xyz
ayannapressley.com
action.314actionfund.org
act.medicare4all.org
ayanna-full.veracitymedia.xyz
www-default.actionkit.com
act.ourrevolution.com
act.progressnownm.org
ayannapressley.com
*.ayannapressley.com
act.presenteaction.org
act.lucaskunce.com
act.sumofus.org
act.campaigntoendqualifiedimmunity.org
action.pollinis.org
act.jamieraskin.com
act.one.org
shop.ayannapressley.com
ayanna-full.veracitymedia.xyz
shop.ayannapressley.com
www-default.actionkit.com
www-default.actionkit.com
ayannapressley.com
act.realjusticepac.org
act.pollinis.org
act.powerthepolls.org
action.standupamerica.com
shop.ayannapressley.com
shop.ayannapressley.com
act.pirg.org
ayanna-full.veracitymedia.xyz
act.progressga.org
act.ruraldemocratsturnoutfund.com
act.ayannapressley.com
action.pollinis.org
ayanna-full.veracitymedia.xyz
act.jstreet.org
ayanna-full.veracitymedia.xyz
act.ourrevolution.com
act.democratic-strategy.org
www-default.actionkit.com
shop.ayannapressley.com
act.cutcruz.com
act.beaherofund.com
ayanna-full.veracitymedia.xyz
act.hillharper.com
act.progressflorida.org
ayannapressley.com
act.onewisconsinnow.org
sni.cloudflaressl.com
act.progressva.org
www-default.actionkit.com
sni.cloudflaressl.com
act.cbcpac.org
sni.cloudflaressl.com
act.fusewashington.org
act.nuestropac.com
ayanna.veracitymedia.xyz
act.ourvoiceourvote.us
act.electdemocraticwomen.org
act.onewisconsinnow.org
act.ourrevolution.com
act.bcndp.ca
shop.ayannapressley.com
act.occupydemocrats.com
www.nowarwithiran.org
act.bcndp.ca
act.sumofus.org
ayanna.veracitymedia.xyz
act.onewisconsinnow.org
act.fusewashington.org

Certificate

The complete raw certificate details for act.ayannapressley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2zCCBsOgAwIBAgISBMtAvuyXyqXWPUT582Tx+aX2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDMyMTEyMTZaFw0y
MDAzMDIyMTEyMTZaMCExHzAdBgNVBAMTFmFjdC5heWFubmFwcmVzc2xleS5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0rrkSwvY6/nrXxFGQ3U/+
yz2r5X/pBlO38tsg6T4/fZuOTsqFBCbMZQ3QYE0GWgzFQlJr3NSrvdH3qWrVrQDM
lCHGYrxVrAYuWVdTRIQpIrWEnlA1QgW2bONM4kdpjdcgBY6TDI0xayxTAbOKiMbX
TJa9aSO3B909JRte2jVoJaMLewEKZRDFEuZoABYkuTenOvzYEz0BI9GIJezVNmrY
etbfU3lodfjTs3OrqTj0LHX7f7ogjSly0D4EzjCpzxcDAgPXOapiI59h1uslVsrW
+zm+B1v1SEsXWA8blboZMhutxbCxF6AzGqrceRJgao1OqFdUCxKBHi3UuGeGZEPQ
eXIh5G4sQ4U6+b7KYhkkHf9X/6vfuZT6HJgYjxidIuWAHPhvX2g0oZsKuAvgOE5z
nJRV3gol/o4C/Idqi9caW2eDFhsJoGLPoKYDybL1rc1efoEUYmUrgQkTukZG3CSs
ubQwnH7DEcXJj8HEqNEXdiDlGTeBy4I4Rmqo0aRy4fjWrABv8H8A3NYp6at2cht7
/Prv6982FG8tN+rZNbKX0AjY4Zdr7HL5M0Z2B6r2fOv4kafyJTBEk+D3FyKdoy1f
vX3/2RJkiLAmFjHgzI5+ly56HDIADT7ZEd8QKtK++FSx1vD6Z/dfI6brNNo06YVF
XipsG2Slhlog4qM0OHm60QIDAQABo4ID4jCCA94wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQU9fxNRBpXyr8ey8oFVCgpj16f+TAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIBlwYDVR0RBIIBjjCCAYqCFmFj
dC5hbmRyZXdyb21hbm9mZi5jb22CFmFjdC5heWFubmFwcmVzc2xleS5jb22CG2Fj
dC5wcm9ncmVzc2l2ZXRha2VvdmVyLm9yZ4IWYWN0LnJlYWxqdXN0aWNlcGFjLm9y
Z4IQYWN0LnJva2hhbm5hLmNvbYIPYWN0LnN1bW9mdXMub3JnghJhY3QudGhlaXJ3
b3JsZC5vcmeCGGFjdC50aGVzeXJpYWNhbXBhaWduLm9yZ4IYYWN0LndlYXJldWx0
cmF2aW9sZXQub3JnghVhY3Qud2lud2l0aG91dHdhci5vcmeCEGFjdC55YW5nMjAy
MC5jb22CEGFjdC56YXppbS5vcmcuaWyCF2FjdGlvbi5zdG9yeW9mc3R1ZmYub3Jn
ghVhY3Rpb24udHVybm91dHBhYy5vcmeCGWhlcm9mdW5kLndoaXRlaGVsbWV0cy5v
cmeCEXBlb3BsZXNjb252b3kuY29tgh9wZW9wbGVzbWlsbGlvbi53aGl0ZWhlbG1l
dHMub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA
AAFuzdI4AQAABAMARjBEAiB1taiWKbfsoHQ/Tb1ltuA+p3qq6nKmwc3x1xiMQyzU
qgIgThvrdsvNDHQIafxtSlpxqjTwm96UJVSoylI7ySqjVjgAdgAHt1wb5X1o//Gw
xh0jFce65ld8V5S3au68YToaadOiHAAAAW7N0jg5AAAEAwBHMEUCIHhQXneW5/sP
2BpUj+vYQJHjdkyvpNh5pn8TK4db95rVAiEA4zYe6Ctd3HGo8kz1rGD4sIZQZDK8
xLF/9MvLObmJZdYwDQYJKoZIhvcNAQELBQADggEBAF4qlaqnkfBmAgbAjysnfMfy
m1S5mMsTx/GFbMPjbb9lPxVEgEhboBgPSf4vY0i5QAHkWMP1g5PxydF1qruQHDdt
sadbSHIXYBq+aByQ1Hmd9nWJ3j7uHNvJWXfdSvwwfuy5aQrOm2kOxRz7nWbX3j96
dfkM9RWXQ3oKZUGixzWXFhPLrxcAlYuM/Z4/vQFtORlMzWClQ1kWbGgawS7jH2re
pSXMlvDOARnqB2JYnA8oZCt1tSERF5btK29HTFYh0Y73OHe9UyBNCX4KFkgBqDS2
g/3WAbQXk0GIxtWO/4NyPC32Scw85PIiMby/U6uSQjYJQo/DMmXJAliyx9DnoEw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417612526138799686360584839904691782002166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 21:12:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 21:12:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.ayannapressley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737120336212508715746525126983732834954366715062164354225897528708709693641973829807954463478075743528278538402642301602531623315871410183660569043331876362290916300913990010690947253832641559956485012153298811180888869751441523132596765052191282008646778428512627334892011570040726044459521484458502743111018724480022227411422325472444054324712025875631546917053954071145319213348108820602205957340105095670782365771586264443796714271641835510743867053350945096595307224776282514092039039002566129410870355044184995239804408962039282761128483181161994320574813113049027755800657017289361011757842113936603798859439835717435457575514988399229018554639615354877866772881727297612031072538960452969495596567451889900071016804675419310656476421830753286860591604125119269617513848058617925245337531362427590891983141507409719651835078267596716902500269660257658693005187030395880001667239213514996121788365429051829200799980135021130496036130772218420417536855508393544335182088749040031345916390974202724128935080890763375336174361770068774544559421165374210165139502986518366379375945782055974322128615332703848601211764664010070405054211692514564780276878334607789310787747021396361700807836910571558436812129823701832839123349125841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14f5fc4d441a57cabf1ecbca055428298f5e9ff9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.andrewromanoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressivetakeover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.realjusticepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.rokhanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.theirworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.winwithoutwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.yang2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zazim.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.storyofstuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.turnoutpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesmillion.whitehelmets.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ecdd238010000040300463044022075b5a89629b7eca0743f4dbd65b6e03ea77aaaea72a6c1cdf1d7188c432cd4aa02204e1beb76cbcd0c740869fc6d4a5a71aa34f09bde942554a8ca523bc92aa3563800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecdd238390000040300473045022078505e7796e7fb0fd81a548febd84091e3764cafa4d879a67f132b875bf79ad5022100e3361ee82b5ddc71a8f24cf5ac60f8b086506432bcc4b17ff4cbcb39b98965d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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