<!--
	Problematic subdomains:

		- ^	(cert only matches *.citizen.org)

-->
<ruleset name="Public Citizen">

	<target host="citizen.org" />
	<target host="*.citizen.org" />


	<securecookie host="^(?:secure|www)\.citizen\.org$" name=".+" />


	<rule from="^http://(?:www\.)?citizen\.org/"
		to="https://www.citizen.org/" />

	<rule from="^http://(action|secure)\.citizen\.org/"
		to="https://$1.citizen.org/" />

</ruleset>