progressva.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:66:27:c3:ce:00:ab:0d:f7:f7:72:c2:38:b1:30:96:1f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=progressva.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:66:27:c3:ce:00:ab:0d:f7:f7:72:c2:38:b1:30:96:1f
Serial Number (int): 432634676083051412321557107961790867740191
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:44:6b:2f:cd:ca:81:4e:6b:45:c9:f8:2f:a4:25:fc:22:3b:b5:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:68:76:49:06:41:39:77:f7:5d:e0:f6:54:6b:7d:6c:be:a8:9a:35
Fingerprint (sha256): d6:c8:48:be:d9:3b:01:8d:2a:17:39:ff:d7:e8:a0:1d:ea:7d:d1:2d:0d:ee:df:e1:2d:6a:4c:7b:8e:c5:e4:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate progressva.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for progressva.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

progressva.org

Other certificates including the domain name progressva.org

(limited to 100 certificates)
act.one.org
act.johnfetterman.com
act.progressiowa.org
progressva.org
action.wemove.eu
act.medicare4all.org
va.pnstate.com
act.dirtroaddems.com
act.leftnet.org
www-default.actionkit.com
progressva.org
act.weareultraviolet.org
progressva.org
peoplesmillion.whitehelmets.org
www-default.actionkit.com
act.colorofchange.org
www-default.actionkit.com
act.lucaskunce.com
www-default.actionkit.com
act.peoplesconvoy.com
www-default.actionkit.com
act.one.org
progressva.org
progressva.org
act.gunsensevoter.org
www-default.actionkit.com
www-default.actionkit.com
progressva.org
act.realjusticepac.org
progressva.org
progressva.org
va.pnstate.com
action.standupamerica.com
va.pnstate.com
act.ruraldemocratsturnoutfund.com
action.pollinis.org
act.defendvotingrights.org
act.ourrevolution.com
progressva.org
progressva.org
act.berniesanders.com
act.grassrootslaw.org
go.giffords.org
act.hillharper.com
progressva.org
act.ourrevolution.com
progressva.org
progressva.org
progressva.org
progressva.org
act.progressva.org
act.gavinnewsom.com
progressva.org
progressva.org
progressva.org
va.pnstate.com
www-default.actionkit.com
act.electdemocraticwomen.org
act.ourrevolution.com
progressva.org
act.bcndp.ca
act.fusewashington.org
act.occupydemocrats.com
progressva.org
progressva.org
progressva.org
act.qasimforcongress.org
act.nuestropac.com

Certificate

The complete raw certificate details for progressva.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4ylALzvDCo78PJaE0W
GnBRVEKIlSFajsCORk25Qy8fB23D5byeSJuaeRgoQXZPWxmGyaiSbMBy3IdBKRFY
7EUORgb8bF8BOmSZhgDXNUsRCdK4V1EBgwRdrimaqS4wq94Hbk1C+MSZAMWIq0Rr
AHalZ2Hw5T5nDkXbzacEkSq1VzNhuVjbmNgwL/x7xgmw/gi4wPjCNoFYflx1WRg3
OsKE418+O+CDgSWvJiVy2gQ7h6q+mLxVDn7jFrLiXjVuER4YNfeRGoarGRrar1fi
QLwBgK6ZoG3qlA84yFHqrz6nHUoW7IZZNOnlHefkrI5MIbdrq36MMI54BGWtf0+b
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432634676083051412321557107961790867740191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 21:18:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 21:18:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'progressva.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23219069408816603034140831638443621835231378972599381542565339162898990081948730635771260687857819217487706367177314679913459067396054028166696229436544502188239298819672008385002762600955027118215374984302184635292005967118323292862197197697924170500860428169155947724813747846133167723724324959571310250880280069049039328572672796596911302400698176110741766466311780352599105846781866048538372621450093654259396120984344095790052906033111004672421279514744301259946729628512213811576815847956937876457970764344598073462073913013936350836088275990122894299240587024398577297609813232528556334498421899521991291935609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab446b2fcdca814e6b45c9f82fa425fc223bb591
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressva.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db925efa300000403004730450220606424538dde5612f4796f80486a78406610902b00023d6f4b25d5d48a59e1cf022100afb9cf88611d684ee51b5f6e828b88bbb8052051a0a6e070e95f2430ad993c47007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018db925f13e0000040300483046022100fe1811d30c7da908f48b40da6f645c1b1227528ef77f7cecd32b91b8fd1a9fcd0221009d1072fa73bb9bb8d909f8cdba241bc9276dc34d673eb7aaf9ed0d601e8cb9f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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