act.qasimforcongress.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:c2:cc:ea:aa:b1:f6:e5:24:29:48:f8:18:73:f2:1b:37 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=act.qasimforcongress.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6b:c2:cc:ea:aa:b1:f6:e5:24:29:48:f8:18:73:f2:1b:37
Serial Number (int): 298006005275170282521127142428383353379639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:84:41:37:42:1a:c9:6f:4c:cd:79:b7:ef:94:44:f9:3b:8a:b5:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:fc:bc:bb:0c:a4:2c:4c:4f:2f:54:f5:9f:0b:55:88:13:07:da:cd
Fingerprint (sha256): f8:cd:e6:d0:9b:1a:4e:8b:80:5b:23:50:ef:dc:4c:ac:cb:82:06:58:db:ed:5b:c4:a8:cd:48:d3:2a:e0:8c:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate act.qasimforcongress.org

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.qasimforcongress.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.battlebornprogress.org
act.berniesanders.com
act.bobferguson.com
act.cbcpac.org
act.electdemocraticwomen.org
act.fusewashington.org
act.kairosaction.org
act.kairosfellows.org
act.katieporter.com
act.lucasformo.com
act.lucaskunce.com
act.markkelly.com
act.mpowerchange.org
act.novoteleftbehindpac.com
act.ourvoiceourvote.us
act.passmedicareforall.org
act.progressflorida.org
act.progressva.org
act.qasimforcongress.org
act.sarahmcbride.com
act.squadvictoryfund.com
act.truthtopowerpac.com
act.vindmanforcongress.com
act.wedefendthevote.org
act.westopgunviolence.org
act.womensmarch.com
action.314actionfund.org
action.futuredems.org
vote.nnu.org

Other certificates including the domain name qasimforcongress.org

(limited to 100 certificates)
action.standupamerica.com
qasimforcongress.org
act.ilhanomar.com
act.johnfetterman.com
act.progressnownm.org
act.hillharper.com
act.lucaskunce.com
act.elizabethwarren.com
act.campaigntoendqualifiedimmunity.org
act.jamieraskin.com
act.progressnc.org
qasimforcongress.org
faithfulamerica.org
act.pirg.org
action.pollinis.org
act.jstreet.org
act.democratic-strategy.org
qasimforcongress.org
go.giffords.org
qasimforcongress.org
act.progressflorida.org
act.cbcpac.org
action.standupamerica.com
act.jamieraskin.com
act.dsausa.org
act.bcndp.ca
act.qasimforcongress.org

Certificate

The complete raw certificate details for act.qasimforcongress.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298006005275170282521127142428383353379639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 22:33:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 22:33:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.qasimforcongress.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819238710177626372149048807150613142324617959236582900104376158395831110930370956764081612633044837294757154740095683599513244543020061013865668495823768807638186756953903228747199855912021826336373930925938169483883984845651064169893240895596071578943338836921117166756337713958469696329249143606704554758440799202704264315454508391070336701793423512702554804490033036694590197642519354416017880245833204682399942837054961142096634253103347500427263366630711220806522312311001152779215097376460246263824018820649079026898059488154248753491798250497273380460735493377337031402848958803415463538620118411036067049961653878249325213139434473089036128924531416810314994574273217954125679682253797557284953171954532406049742056486685311924903934168375325523052075354465615486470668733388732260025418136008458270399668272750718436060612412679402848672321067727961642181973709314311141191482952620328218708377725740322637276175962151333024573981652573018075875402006332959467386047910165306114700573122088449292669894334394429316672852305306062081013538084973328347769338147726501941878570037493114802504954003231101767360232465792609450727344808622514789085729355807695049379684237156590177627807880756065608454976065008329419168899047999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf844137421ac96f4ccd79b7ef9444f93b8ab56a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.battlebornprogress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.berniesanders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.bobferguson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.cbcpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.electdemocraticwomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fusewashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kairosaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kairosfellows.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.katieporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucasformo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.lucaskunce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.markkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mpowerchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.novoteleftbehindpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ourvoiceourvote.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.passmedicareforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.sarahmcbride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.squadvictoryfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.truthtopowerpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.vindmanforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.wedefendthevote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.westopgunviolence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.womensmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.314actionfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.futuredems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.nnu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f315ac7810000040300473045022100a9f9ef3e34ba7722e9ad74d78ca05a6b57f68ecb60bad173379e92e7884f7503022020e2174dde758823f9faa81a93964cf12b71217fddaab9e2645f41693b20687700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f315ac7d1000004030047304502210080f295b4a319447473fec821c6e70b3d55e43c9abafda4ba9a1fb4f890757c49022025901dec37ce8f408328892654522e81a98a1ad93c72e64299a68136bebbdfe3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0624acce7a1fb55796b167adb75853d104757068e1ce61a90dcf43d3ef97787719968d0784bad810c88c567477efbab700f23af6266fdb3e4e500786d1930afca1a85183bf607c8d1330ae601a25a74d63e0aef655eb045136c303bc1f0cfa2d742591418a0f691ace5261600f1e4c5d5577e0c5a039e1bc45e90ae95d2b6bf0a731997f285e5193f2bec89b52687407d26d28022700bda240d5b52dcd7605d8583cebd3e2751169944ef1fe78a26c0a05111e3811e7cd498ef74dc7b7d4d631b3fc8d47a2f10abc0908830d82abeb3cda3aad5a2613b9d437b7bc6444bc47f1320abd5d769112935942efd2b654c1456e5a2a586a40fdca16e51e3af2224e3