go.giffords.org

Issued by R3

About this certificate

This digital certificate with serial number 03:63:d3:ae:37:d3:bb:03:bb:a7:a8:7d:d6:28:4a:88:22:54 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=go.giffords.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:63:d3:ae:37:d3:bb:03:bb:a7:a8:7d:d6:28:4a:88:22:54
Serial Number (int): 295306183819525198833076830813071277040212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:9a:a0:01:56:89:ba:cd:f5:c8:3b:89:41:e0:f3:34:b2:38:26:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:38:12:a6:3a:b2:31:31:78:c2:cb:c9:ba:6b:ba:12:7a:a6:61:34
Fingerprint (sha256): ab:ea:f1:c8:4d:be:a3:46:1b:76:fb:c0:0f:e1:6d:03:40:8a:b3:40:c3:f3:98:1a:8c:49:6f:8a:fd:39:7b:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate go.giffords.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.giffords.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act-cftest.moveon.org
act.907initiative.org
act.abwt.org
act.adamschiff.com
act.advancemaryland.org
act.alabamavaluesprogress.org
act.alex-padilla.com
act.bcndp.ca
act.beaherofund.com
act.berniesanders.com
act.betterutah.org
act.bluesenate.com
act.boldprogressives.org
act.campaigntoendqualifiedimmunity.org
act.chrismurphy.com
act.colorofchange.org
act.colorofchangepac.org
act.commonwealthcommunications.org
act.couragecampaign.org
act.coworker.org
act.coworkerfund.org
act.cutcruz.com
act.dream.org
act.electdiversedems.org
act.electsoutherndemocrats.com
act.elissaslotkin.org
act.fightforreform.org
act.forarpeople.org
act.forwardtn.org
act.fusewashington.org
act.futuredems.org
act.gallegoforarizona.com
act.hillharper.com
act.jamieraskin.com
act.jontester.com
act.jstreet.org
act.katieporter.com
act.kscommonsense.org
act.lgbtequalitypac.org
act.losecruzpac.com
act.lucasformo.com
act.lucaskunce.com
act.mandelabarnes.com
act.marchonpac.com
act.markkelly.com
act.medicare4all.org
act.momsfedup.org
act.moveon.org
act.ndp.ca
act.nnu.org
act.novoteleftbehindpac.com
act.npd.ca
act.occupydemocrats.com
act.ontariondp.ca
act.ourrevolution.com
act.passmedicareforall.org
act.pramilaforcongress.com
act.pro-choicemajority.org
act.prochoicewomen.org
act.progressflorida.org
act.progressva.org
act.qasimforcongress.org
act.rebuildusa.org
act.robbonta.com
act.ruraldemocratsturnoutfund.com
act.summerforpa.com
act.takebackthehouse2024.org
act.tammyduckworth.com
act.thedreamcorps.org
act.thirdbearsolutions.com
act.truthtopowerpac.com
act.winwithoutwar.org
act.womensmarch.com
act.zakforcongress.com
action.ameripacfund.com
action.momsrising.org
action.standupamerica.com
go.dscc.org
go.giffords.org
go.peoplepower.aclu.org
go.peoplepower.org
go.tonyevers.com
join.theintercept.com
vote.peoplepower.org
web.mercycorps.org
www.crisisresponse.us
www.impeach.org
www.nowarwithiran.org
www.savethepostoffice.net
www.trumpisnotabovethelaw.org

Other certificates including the domain name giffords.org

(limited to 100 certificates)
5759978627399680-fe2.pantheonsite.io
action.standupamerica.com
5759978627399680-fe2.pantheonsite.io
giffords.org
ssl714124.cloudflaressl.com
act.johnfetterman.com
5748418722922496-fe2.pantheonsite.io
giffords.org
*.sanssl-006.bsdtools.com
*.sanssl-006.bsdtools.com
5759978627399680-fe2.pantheonsite.io
ssl714125.cloudflaressl.com
5759978627399680-fe2.pantheonsite.io
5769015641243648-fe4.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
giffords.org
shop.giffords.org
respsol-c4.edge.bluestate.digital
5769015641243648-fe4.pantheonsite.io
action.wemove.eu
5759978627399680-fe2.pantheonsite.io
5654672874405888-fe3.pantheonsite.io
giffords.org
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
giffords.org
act.boldprogressives.org
ssl714123.cloudflaressl.com
5759978627399680-fe2.pantheonsite.io
www-default.actionkit.com
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
www-default.actionkit.com
shop.giffords.org
ssl714125.cloudflaressl.com
5748418722922496-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
ssl714125.cloudflaressl.com
5769015641243648-fe4.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
giffords.org
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5769015641243648-fe4.pantheonsite.io
respsol-c4.edge.bluestate.digital
ssl714124.cloudflaressl.com
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
respsol-c4.edge.bluestate.digital
5769015641243648-fe4.pantheonsite.io
act.leftnet.org
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
act.ourrevolution.com
5769015641243648-fe4.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
act.progressnownm.org
ssl714123.cloudflaressl.com
shop.giffords.org
files.giffords.org
5759978627399680-fe2.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
respsol-main.edge.bluestate.digital
www-default.actionkit.com
5759978627399680-fe2.pantheonsite.io
act.hillharper.com
act.electdemsnow.org
*.sanssl-006.bsdtools.com
shop.giffords.org
sni.cloudflaressl.com
5759978627399680-fe2.pantheonsite.io
5665797913444352-fe1.pantheonsite.io
5769015641243648-fe4.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
ssl714125.cloudflaressl.com
act.lucaskunce.com
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
5654672874405888-fe3.pantheonsite.io
respsol-c4.edge.bluestate.digital
respsol-c4.edge.bluestate.digital
5654672874405888-fe3.pantheonsite.io
5769015641243648-fe4.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
5759978627399680-fe2.pantheonsite.io
files.giffords.org
5769015641243648-fe4.pantheonsite.io
o3.shared.global.fastly.net
5654672874405888-fe3.pantheonsite.io
5769015641243648-fe4.pantheonsite.io

Certificate

The complete raw certificate details for go.giffords.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295306183819525198833076830813071277040212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 22:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 22:31:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.giffords.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812138008954922774296235622414641076577070975629041855249946113968318212348959696703667744793701113404580277665029494193885104684386184189747868979795949577855302428472582043254275951425137337948698298550873637141324184636581207286438910611099137054986119474210950429037872011340201494893673280737856631270072734283410683690793093018994477380445546557106659647609844867803777347566429253981474520403468400344176546785263917920081041378649815296037671099687555387722203498693689055174520921108265706952100572090411175975465196170726635166262468396040156376326444046339568373012203723851787285429130964760648556003745431603374855090027386854042454942710983746167591102027804916663090282463436242965456881524864537975331421894873933501469791398681760690108883111285758742979058236901886057417604872740774624606068174928462685164770799165690763913689442234429603171568452061877784912526381559561316377320133296602982048090404501373144345234632089369937056018743831332422238893769856963611868833631990929587619414607276414350976765344296513711971782228035540253976490974557766060241830288002426030168170081887903774477436159384795603331427184075821653639169541826972165735880029508623480840057046555441785817582344955450549619759010042581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							259aa0015689bacdf5c83b8941e0f334b2382620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2029 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-cftest.moveon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.907initiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abwt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.adamschiff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.advancemaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alabamavaluesprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alex-padilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bcndp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.beaherofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betterutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bluesenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.campaigntoendqualifiedimmunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.chrismurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchangepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.commonwealthcommunications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.coworker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.coworkerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cutcruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdiversedems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electsoutherndemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.elissaslotkin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fightforreform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forarpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forwardtn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fusewashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.futuredems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gallegoforarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.hillharper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jamieraskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jontester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jstreet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.katieporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kscommonsense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lgbtequalitypac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.losecruzpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mandelabarnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.marchonpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.markkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.medicare4all.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.momsfedup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.moveon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ndp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nnu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.novoteleftbehindpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.npd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.occupydemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ontariondp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ourrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.passmedicareforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pramilaforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pro-choicemajority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.prochoicewomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.rebuildusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.robbonta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ruraldemocratsturnoutfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.summerforpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.takebackthehouse2024.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.tammyduckworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thedreamcorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thirdbearsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthtopowerpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.winwithoutwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.womensmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zakforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ameripacfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.momsrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.standupamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.dscc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.giffords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.tonyevers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.theintercept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crisisresponse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.impeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowarwithiran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savethepostoffice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumpisnotabovethelaw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ec53421620000040300473045022100cc5df103b7b6c3c4e5e7f0dae24945c5818289e1b1533dc6fe93dae2638bf2b902203c455d626dc9c03bf39e7367ef8a33467ea5150b0220c65488b368c1edbffc5900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ec53421fc000004030046304402203e57a39deb809bdd4f99468c024caff998824a9ff71f54ed69b86444664419d502206fb8fd077d93dc89954000e6f0e3c218dc6a6a19304aa4e199d41f433b96f9f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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