www-default.actionkit.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:0f:e2:45:0c:33:8d:68:d9:60:ea:5e:b0:fe:c2:b7:e1 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www-default.actionkit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:0f:e2:45:0c:33:8d:68:d9:60:ea:5e:b0:fe:c2:b7:e1
Serial Number (int): 300490443270668421138611310105751950899169
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:77:5b:8a:86:9d:c3:63:83:1a:2b:81:8c:3b:2c:b1:d1:18:b2:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:c6:50:b6:40:63:3b:9d:6b:0d:65:52:3d:c6:e4:80:87:fe:b4:aa
Fingerprint (sha256): ae:c6:7f:d4:fa:70:35:ad:0a:6a:73:a8:eb:d9:97:76:b2:b5:7a:ad:5b:39:57:c6:42:58:6f:41:cb:bc:d4:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www-default.actionkit.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-default.actionkit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.350.org
act.350actionfund.org
act.abetterminnesota.org
act.alaskawild.org
act.battlebornprogress.org
act.berniesanders.com
act.betofortexas.com
act.betoorourke.com
act.betterutah.org
act.boldprogressives.org
act.climatetruth.org
act.colorofchange.org
act.colorofchangepac.org
act.commondefense.us
act.couragecampaign.org
act.coworker.org
act.credoaction.com
act.demandaction.org
act.demandaplan.org
act.demandprogress.org
act.democracyforamerica.com
act.dsausa.org
act.endfossilfuelsubsidies.org
act.everytown.org
act.faithfulamerica.org
act.fcnl.org
act.flippable.org
act.forecastthefacts.org
act.freepress.net
act.fusewashington.org
act.gofossilfree.org
act.gunsensevoter.org
act.indivisible.org
act.indivisibleguide.com
act.jayinslee.com
act.jstreet.org
act.momsdemandaction.org
act.moveon.org
act.mpowerchange.org
act.nomorenames.org
act.nrdc.org
act.oilchangeus.org
act.one.org
act.onewisconsinnow.org
act.ourmaryland.org
act.pfaw.org
act.presente.org
act.priceofoil.org
act.progressflorida.org
act.progressivetakeover.org
act.progressnc.org
act.realjusticepac.org
act.represent.us
act.responsiblemaine.org
act.rokhanna.com
act.sumofus.org
act.theirworld.org
act.thejusticecollaborative.com
act.thesyriacampaign.org
act.unitedrepublic.org
act.weareultraviolet.org
act.winwithoutwar.org
act.zazim.org.il
act2.freepress.net
action.endcitizensunited.org
action.kamalaharris.org
action.momsrising.org
action.storyofstuff.org
action.turnoutpac.org
actnow.prochoiceamerica.org
change.institute.global
donate.demandaction.org
donate.demandaplan.org
donate.everytown.org
donate.everytownresearch.org
donate.gunsensevoter.org
donate.momsdemandaction.org
events.peoplesclimate.org
events.watchdisruption.com
go.ecovote.org
go.justicedemocrats.com
go.majorityact.org
go.peoplepower.org
herofund.whitehelmets.org
ignite.biologicaldiversity.org
join.theintercept.com
peoplesconvoy.com
peoplesmillion.whitehelmets.org
screenings.knockdownthehouse.com
support.pressfreedomdefensefund.org
vote.peoplepower.org
web.mercycorps.org
www-default.actionkit.com
www.americawelcomes.org
www.crisisresponse.us
www.resistancerecess.com
www.trumpisnotabovethelaw.org

Other certificates including the domain name actionkit.com

(limited to 100 certificates)
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
actionkit.com
actionkit.com
www-default.actionkit.com
actionkit.com
track.sp.actionkit.com
www-default.actionkit.com
ots.actionkit.com
www-default.actionkit.com
*.int.actionkit.com
www-default.actionkit.com
act.represent.us
www-default.actionkit.com
www-default.actionkit.com
*.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
sgevents.actionkit.com
ots.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.represent.us
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
track.sp.actionkit.com
actionkit.com
www-default.actionkit.com
*.int.actionkit.com
*.dev.int.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
*.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
track.sp.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
ots.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
*.int.actionkit.com
ots.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
ots.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
*.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
roboticdogs.actionkit.com
actionkit.com
act.represent.us
www-default.actionkit.com
actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com

Certificate

The complete raw certificate details for www-default.actionkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPGjCCDgKgAwIBAgISA3MP4kUMM41o2WDqXrD+wrfhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjkxMTUxMzlaFw0x
OTA3MjgxMTUxMzlaMCQxIjAgBgNVBAMTGXd3dy1kZWZhdWx0LmFjdGlvbmtpdC5j
b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDTBlthJcamWyFCre3R
9yGYxupYRFhq0YebeElH2I/zBU7ecygnUjmiK3U5Qj9WY2Vqhwcj0uAKr1y3ZQ5H
ZJALL0UpCpZd7MJW+7JdS3Q80pMzjO5KAIYl3T6ytB7CLXuMBK28MeUoYBFQVSUd
+bKFBM/ulAyYLwTYIf8eHKY9iFR8tlTsmJxMu5hJTDd4YQGUfpe7EmJ1giv85V7E
4A00nQ/DNOZ27WZdgE43IPJC8V4DgLeWDXBf5OdcHG1ggsU+rpE87JduhGXjFPfy
zoj+gTnnKRCjLlhOAjxaShhsItpkljJvPGAEHki93yu3/SU8EcSKUEzhZpursaxn
vwpxTVWQgo2EIQEA0kNZMbN0FlEPvVjPzX9OocSkc/FwE7CgHBURo2gNSETZadnD
W/vMjnuRzwUKPcXiVqVBlIr5EwLCIn1t5BJaG0yVC9oKlBTkyJGAsrHpSrhUQUMa
cA1WgVCEPAMnz6L4OZFLxZIi63mIEN6uuvFULfF+XL563x0LHFCbiTqGqiTCNG9g
epX7TmgTLRZHh1KLNYH7azrzlaIcM0nCDHz+HR2hi0vArYWfcD8Xe22h5pmGDh+j
GComwHMtXxOj5L0Cpf+cVinFaxVqQ31bF637y09joTBPhJmQH4vwDYucuvi1X5t3
/aanEtvubbYVFeJb6TRBzkgvuwIDAQABo4ILHjCCCxowDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTjd1uKhp3DY4MaK4GMOyyx0RiyuDAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIII0wYDVR0RBIIIyjCCCMaC
C2FjdC4zNTAub3JnghVhY3QuMzUwYWN0aW9uZnVuZC5vcmeCGGFjdC5hYmV0dGVy
bWlubmVzb3RhLm9yZ4ISYWN0LmFsYXNrYXdpbGQub3JnghphY3QuYmF0dGxlYm9y
bnByb2dyZXNzLm9yZ4IVYWN0LmJlcm5pZXNhbmRlcnMuY29tghRhY3QuYmV0b2Zv
cnRleGFzLmNvbYITYWN0LmJldG9vcm91cmtlLmNvbYISYWN0LmJldHRlcnV0YWgu
b3JnghhhY3QuYm9sZHByb2dyZXNzaXZlcy5vcmeCFGFjdC5jbGltYXRldHJ1dGgu
b3JnghVhY3QuY29sb3JvZmNoYW5nZS5vcmeCGGFjdC5jb2xvcm9mY2hhbmdlcGFj
Lm9yZ4IUYWN0LmNvbW1vbmRlZmVuc2UudXOCF2FjdC5jb3VyYWdlY2FtcGFpZ24u
b3JnghBhY3QuY293b3JrZXIub3JnghNhY3QuY3JlZG9hY3Rpb24uY29tghRhY3Qu
ZGVtYW5kYWN0aW9uLm9yZ4ITYWN0LmRlbWFuZGFwbGFuLm9yZ4IWYWN0LmRlbWFu
ZHByb2dyZXNzLm9yZ4IbYWN0LmRlbW9jcmFjeWZvcmFtZXJpY2EuY29tgg5hY3Qu
ZHNhdXNhLm9yZ4IeYWN0LmVuZGZvc3NpbGZ1ZWxzdWJzaWRpZXMub3JnghFhY3Qu
ZXZlcnl0b3duLm9yZ4IXYWN0LmZhaXRoZnVsYW1lcmljYS5vcmeCDGFjdC5mY25s
Lm9yZ4IRYWN0LmZsaXBwYWJsZS5vcmeCGGFjdC5mb3JlY2FzdHRoZWZhY3RzLm9y
Z4IRYWN0LmZyZWVwcmVzcy5uZXSCFmFjdC5mdXNld2FzaGluZ3Rvbi5vcmeCFGFj
dC5nb2Zvc3NpbGZyZWUub3JnghVhY3QuZ3Vuc2Vuc2V2b3Rlci5vcmeCE2FjdC5p
bmRpdmlzaWJsZS5vcmeCGGFjdC5pbmRpdmlzaWJsZWd1aWRlLmNvbYIRYWN0Lmph
eWluc2xlZS5jb22CD2FjdC5qc3RyZWV0Lm9yZ4IYYWN0Lm1vbXNkZW1hbmRhY3Rp
b24ub3Jngg5hY3QubW92ZW9uLm9yZ4IUYWN0Lm1wb3dlcmNoYW5nZS5vcmeCE2Fj
dC5ub21vcmVuYW1lcy5vcmeCDGFjdC5ucmRjLm9yZ4ITYWN0Lm9pbGNoYW5nZXVz
Lm9yZ4ILYWN0Lm9uZS5vcmeCF2FjdC5vbmV3aXNjb25zaW5ub3cub3JnghNhY3Qu
b3VybWFyeWxhbmQub3JnggxhY3QucGZhdy5vcmeCEGFjdC5wcmVzZW50ZS5vcmeC
EmFjdC5wcmljZW9mb2lsLm9yZ4IXYWN0LnByb2dyZXNzZmxvcmlkYS5vcmeCG2Fj
dC5wcm9ncmVzc2l2ZXRha2VvdmVyLm9yZ4ISYWN0LnByb2dyZXNzbmMub3JnghZh
Y3QucmVhbGp1c3RpY2VwYWMub3JnghBhY3QucmVwcmVzZW50LnVzghhhY3QucmVz
cG9uc2libGVtYWluZS5vcmeCEGFjdC5yb2toYW5uYS5jb22CD2FjdC5zdW1vZnVz
Lm9yZ4ISYWN0LnRoZWlyd29ybGQub3Jngh9hY3QudGhlanVzdGljZWNvbGxhYm9y
YXRpdmUuY29tghhhY3QudGhlc3lyaWFjYW1wYWlnbi5vcmeCFmFjdC51bml0ZWRy
ZXB1YmxpYy5vcmeCGGFjdC53ZWFyZXVsdHJhdmlvbGV0Lm9yZ4IVYWN0Lndpbndp
dGhvdXR3YXIub3JnghBhY3QuemF6aW0ub3JnLmlsghJhY3QyLmZyZWVwcmVzcy5u
ZXSCHGFjdGlvbi5lbmRjaXRpemVuc3VuaXRlZC5vcmeCF2FjdGlvbi5rYW1hbGFo
YXJyaXMub3JnghVhY3Rpb24ubW9tc3Jpc2luZy5vcmeCF2FjdGlvbi5zdG9yeW9m
c3R1ZmYub3JnghVhY3Rpb24udHVybm91dHBhYy5vcmeCG2FjdG5vdy5wcm9jaG9p
Y2VhbWVyaWNhLm9yZ4IXY2hhbmdlLmluc3RpdHV0ZS5nbG9iYWyCF2RvbmF0ZS5k
ZW1hbmRhY3Rpb24ub3JnghZkb25hdGUuZGVtYW5kYXBsYW4ub3JnghRkb25hdGUu
ZXZlcnl0b3duLm9yZ4IcZG9uYXRlLmV2ZXJ5dG93bnJlc2VhcmNoLm9yZ4IYZG9u
YXRlLmd1bnNlbnNldm90ZXIub3Jnghtkb25hdGUubW9tc2RlbWFuZGFjdGlvbi5v
cmeCGWV2ZW50cy5wZW9wbGVzY2xpbWF0ZS5vcmeCGmV2ZW50cy53YXRjaGRpc3J1
cHRpb24uY29tgg5nby5lY292b3RlLm9yZ4IXZ28uanVzdGljZWRlbW9jcmF0cy5j
b22CEmdvLm1ham9yaXR5YWN0Lm9yZ4ISZ28ucGVvcGxlcG93ZXIub3JnghloZXJv
ZnVuZC53aGl0ZWhlbG1ldHMub3Jngh5pZ25pdGUuYmlvbG9naWNhbGRpdmVyc2l0
eS5vcmeCFWpvaW4udGhlaW50ZXJjZXB0LmNvbYIRcGVvcGxlc2NvbnZveS5jb22C
H3Blb3BsZXNtaWxsaW9uLndoaXRlaGVsbWV0cy5vcmeCIHNjcmVlbmluZ3Mua25v
Y2tkb3dudGhlaG91c2UuY29tgiNzdXBwb3J0LnByZXNzZnJlZWRvbWRlZmVuc2Vm
dW5kLm9yZ4IUdm90ZS5wZW9wbGVwb3dlci5vcmeCEndlYi5tZXJjeWNvcnBzLm9y
Z4IZd3d3LWRlZmF1bHQuYWN0aW9ua2l0LmNvbYIXd3d3LmFtZXJpY2F3ZWxjb21l
cy5vcmeCFXd3dy5jcmlzaXNyZXNwb25zZS51c4IYd3d3LnJlc2lzdGFuY2VyZWNl
c3MuY29tgh13d3cudHJ1bXBpc25vdGFib3ZldGhlbGF3Lm9yZzBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABamkmoOAAAAQDAEYwRAIg
WZk8rStcT8lNmjxo/V2qofk/tKkELL//w0kRNvMU1LgCIC8ovcVNDDn5QpeM+JKV
8m+UF3lvXnDf0NJGGIiigmNwAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFqaSafaAAABAMARzBFAiEAvnfXGlOQmPzCZZPOuG45S5GSy0I16Jhs
gIjYhPDhGuwCIDYaVfRkBfOIw1qsv98j0gA/z1VQi0UAFocSb7IRw+aYMA0GCSqG
SIb3DQEBCwUAA4IBAQBqj+yjeurcxl8HsGYFwaaaES1sXAm3lShsbk6TSGiXgED5
WOyUGWeeBfMGihVxAvE5RZrlJgUsszkRu/O3cU6+epN+9yIdc7IJpzIpQbZ0aWu8
aMH/kNzEc3uWDm5byMBOfjZVd7pTyawePs7gukkVPh762RO24QBnBx4JUW+WPOsZ
HO82Q7pOuTgz9Hea/3Pk8z1v5C5nzQX9PLFUgL5KLcjN0p1QtCUMLC62SCgJVkfX
xNv5GYA11T2V213BmibYDq6wZvnVivYrIWRP13I/xY2skMNRD8X9vh+UDs7QNUWz
GFITJHe1DWuEVMAgwP00FJx7bhPMJHP0Z5mnJfH4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300490443270668421138611310105751950899169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 11:51:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 11:51:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-default.actionkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860906203422023321141868210431610524911712663113822659257741923970234453772747120895388765003343579618026860638193608529399832065576901915202771719811123522813042882389749304520383081097472538553187785946455188694939230799776253021547555904085494743194072537667590587845376298618641993515433054891347099227224615571682254645909683807598279918011382585069519298666172988096910501944238484739141692696383984354094178244318660073209608320823026670648988593579317225611405196260111168956792673199066022540392537710114727048450007307998261796969547629054803212678301407023277925637371544335286932980238041822097027043911754711416803520864003305343265055257180846374664652233437054701134291812593559154026000663911599640434201234814613224915001463958254151706673583231565723363025309632919520573862915914101918031158793720455544296671558588837073393044960944164592935825317497936782915681704350989382729081101066576995923701241197527979183527925854199762433570884261379230539095398968169944440782212844718319281967847038479255478000245923876827007834450928850763752622869419186821333965073838951490586944534270718699662542250013615731081259703173958792931974205250659482155742702051503809153148323024608402731971420823943314566860673396667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3775b8a869dc363831a2b818c3b2cb1d118b2b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.350.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.350actionfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.abetterminnesota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.alaskawild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.battlebornprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betofortexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betoorourke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betterutah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.boldprogressives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.climatetruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.colorofchangepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.commondefense.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.couragecampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.coworker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.credoaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demandprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.democracyforamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dsausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.endfossilfuelsubsidies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.everytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.faithfulamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fcnl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.flippable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forecastthefacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fusewashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gofossilfree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gunsensevoter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.indivisible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.indivisibleguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jayinslee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jstreet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.momsdemandaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.moveon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mpowerchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nomorenames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.nrdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.oilchangeus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.one.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.onewisconsinnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ourmaryland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.pfaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.presente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.priceofoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressivetakeover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.realjusticepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.represent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.responsiblemaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.rokhanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sumofus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.theirworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thejusticecollaborative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.thesyriacampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.unitedrepublic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.weareultraviolet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.winwithoutwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.zazim.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act2.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.endcitizensunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.kamalaharris.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.momsrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.storyofstuff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.turnoutpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actnow.prochoiceamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'change.institute.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.demandaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.demandaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.everytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.everytownresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.gunsensevoter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.momsdemandaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.peoplesclimate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.watchdisruption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ecovote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.justicedemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.majorityact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herofund.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignite.biologicaldiversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.theintercept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesconvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesmillion.whitehelmets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenings.knockdownthehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pressfreedomdefensefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.peoplepower.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.mercycorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-default.actionkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americawelcomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crisisresponse.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistancerecess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumpisnotabovethelaw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a6926a0e00000040300463044022059993cad2b5c4fc94d9a3c68fd5daaa1f93fb4a9042cbfffc3491136f314d4b802202f28bdc54d0c39f942978cf89295f26f9417796f5e70dfd0d2461888a282637000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a69269f680000040300473045022100be77d71a539098fcc26593ceb86e394b9192cb4235e8986c8088d884f0e11aec0220361a55f46405f388c35aacbfdf23d2003fcf55508b45001687126fb211c3e698
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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