securedns2.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:95:96:41:2b:e3:84:f3:6c:de:04:76:bd:ee:c4:35:9a:1c was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns2.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:96:41:2b:e3:84:f3:6c:de:04:76:bd:ee:c4:35:9a:1c
Serial Number (int): 312238653055333665292787436311204106443292
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:66:3d:b7:63:fe:52:b6:36:bc:df:64:2f:f7:6b:7d:6e:75:11:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:d0:96:56:b8:d4:9d:05:25:1e:b5:bf:82:c6:aa:3f:f6:b3:43:97
Fingerprint (sha256): 03:9d:40:f5:f8:2d:47:65:fb:2f:16:a1:33:c0:41:b0:26:26:c8:68:d2:cd:e4:a8:a8:48:7d:d4:5c:88:82:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns2.planmygift.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns2.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1899legacy.appstate.edu
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.uh.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
komengiftplanning.org
legacy.fundforanimals.org
legacy.houstonpublicmedia.org
legacy.savingplaces.org
legacy.wallawalla.edu
legacygift.calvin.edu
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
mystjolegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.awr.org
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.idahohumanesociety.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.mercyone.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.thezoosociety.org
plannedgiving.wamu.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
uoflplannedgifts.org
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.komengiftplanning.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.mystjolegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns2.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR8cCri21lARm45hjYhs
l8ZSE6jsNh/stoRXHOIbP+ZLyQiT8mkmdG55rTBcQsVTpP3w7zshv/hCpxOaxumz
tEfsbEHHdp5qXtNcgmQoqvgH3mV9pbLq5dJIufwUlXd5XTcK0OI5MfObtZroYv1M
aF4TU5kKIKhgaBSIPhyr7r/brRSua6CxuraKfpUNdOpDAfJAmso5nER6Dj7drhYR
2PzMRxL5FkkbP6e3scoqUFdoIAbGus2z4P18/WaeM1TjESFgmFMxZjZQZWN4nAct
wV+AbbZTpkDMjkAj2jnpIlnCfj40PwOGY8hjLHeezQd6eTJe66dUTvO3l73maiwH
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312238653055333665292787436311204106443292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 16:27:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 16:27:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns2.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19329801345044671406121750673422783000587506762180132371959103785618733984801689079792216776952436307685609571076363154187834069127863201444750411183894857163020105179453283845359989026276266857767008588113941139450920006802111189874175931630801875863981866107473334922835870484803346730540040584925973986742617169655519075261618398503855577127036173398771791169115111390966238757896566365857365292749968976867226102702423217862985605487470765356149704099239116981726842880000306947399534464642657419799854401832220332903309154066216176068119889224699775916183306288972341332792718605104761560554388528031521821165517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28663db763fe52b636bcdf642ff76b7d6e7511ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1899legacy.appstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatizoo.myestategift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endowmentfund.klrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.gonzaga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.f4mmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.gsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.miamioh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.quincy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.temple.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khpfoundation.championscirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.fundforanimals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.houstonpublicmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.savingplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wallawalla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.calvin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyofpeace.afsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.acs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.monmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.cgu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystjolegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktrustlegacy.pikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.kvc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.pnwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.witc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adelphi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.advance.einstein.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aesnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arthritis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aurora.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.awr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.biglife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.butler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calstatela.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.campbellsville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.capitalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrenswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioceseofprovidence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idahohumanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.landconserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mercyone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohsufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rmhcbayarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishriteforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slpl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sluh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.smiletrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stepupforstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thezoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wamu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.yctorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns2.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystjolegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000178cc45b4310000040300473045022100a820ca64720d1e885b778b33206e304a6b5276e9961b25c6d3f3906490e840850220199a47d5038556db7c13dc1c73d476ca6d760c5cef175f04931044cf8bbd526e0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178cc45b4750000040300473045022100ce7bbb6f0e92635efb772e19063df6ee3ddc2036b4b7337ee3437e3af095bef5022065326256797e22be124b84be944532f6abe5bf6cb7da0cd277da797f3c082d65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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