securedns4.planmygift.org
Issued by R3
About this certificate
This digital certificate with serial number 04:b2:1e:c6:b8:8a:a6:f4:fa:c4:50:63:55:0c:48:a6:f9:96 was issued on by Let's Encrypt.
With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=securedns4.planmygift.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b2:1e:c6:b8:8a:a6:f4:fa:c4:50:63:55:0c:48:a6:f9:96Serial Number (int): 409060313696568094627652982351112580823446
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 84:a9:9a:51:b2:df:fe:fd:6c:2d:c7:48:3b:9b:eb:86:4e:9b:09:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): cf:5b:d8:b3:75:b6:1b:35:e3:45:2c:36:c0:84:2b:ef:4f:5e:c7:af
Fingerprint (sha256): 05:19:15:9f:8d:a1:1a:5c:30:7b:86:12:ac:05:12:2a:15:c2:c8:d7:21:13:55:c9:f2:de:7f:28:61:6e:49:7c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate securedns4.planmygift.org
64
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for securedns4.planmygift.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
davplanmygift.org
divinity.duke.myplannedgift.org
founderssociety.abi.org
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacyplanning.caritasofaustin.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.fenwickfalcons.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.maineaudubon.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.murraystate.edu
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.shadysideacademy.org
plannedgiving.shambhala.org
plannedgiving.slu.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
divinity.duke.myplannedgift.org
founderssociety.abi.org
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacyplanning.caritasofaustin.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.fenwickfalcons.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.maineaudubon.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.murraystate.edu
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.shadysideacademy.org
plannedgiving.shambhala.org
plannedgiving.slu.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
Other certificates including the domain name planmygift.org
(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org
Certificate
The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMhTCCC22gAwIBAgISBLIexriKpvT6xFBjVQxIpvmWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMjkxNTAwMjRaFw0yMjAxMjcxNTAwMjNaMCQxIjAgBgNVBAMT GXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCKOQHm+O8mkw3aiDLwQbD/lgFIJdeie0wpMr9B+sQF2ihEbJ3W ifnZKW6qSNm91j0Z74M24ZdaT3qknam2kAB0S556wPfo8CoJldlg4RleNLfqSWwc uJ00vo8MB6p4qtRFErOCHTEtnoxlxn08eaWr1vu8iC+z5pwzwbDH6qbxrXvNEnmx LidTA5nZ4xETpSb9sbZfGMjQyI57f7IPhYFcztenFdkeMARwQY9ZhRYO6JdelGkF yKj6H0mP16a7eXeqfrRXmunjHLwK0Y3wvAH2rcjPhdn+WE+VFuDUbpVHeUzJllKX t2+sutVPhgIUa/AwH5g7wZLM5VsEg82wQspjAgMBAAGjggmhMIIJnTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFISpmlGy3/79bC3HSDub64ZOmwlWMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIIHbwYDVR0RBIIHZjCCB2KCEWRhdnBsYW5teWdpZnQub3Jn gh9kaXZpbml0eS5kdWtlLm15cGxhbm5lZGdpZnQub3Jnghdmb3VuZGVyc3NvY2ll dHkuYWJpLm9yZ4IZZ2lmdHBsYW5uaW5nLmRhdmlkc29uLmVkdYIqZ2lmdHBsYW5u aW5nLmV2ZXJncmVlbmhlYWx0aGZvdW5kYXRpb24uY29tgh5naWZ0cGxhbm5pbmcu c2FyYWhsYXdyZW5jZS5lZHWCEGxlZ2FjeS5jYXJsZS5vcmeCDmxlZ2FjeS5ud2Yu b3Jngh9sZWdhY3lnaXZpbmcuYXRsYW50YW1pc3Npb24ub3JnghlsZWdhY3lnaXZp bmcuY2FwcmFkaW8ub3JngiJsZWdhY3lwbGFubmluZy5jYXJpdGFzb2ZhdXN0aW4u b3JngiBteWxlZ2FjeWdpZnQuYXVndXN0aW5pYW5mdW5kLm9yZ4IVbXlwbGFuLnNp ZXJyYWNsdWIub3Jngh5wbGFubXlsZWdhY3kubm9ydGh3b29kdGVjaC5lZHWCFXBs YW5uZWRnaXZpbmcuYWJpLm9yZ4IjcGxhbm5lZGdpdmluZy5hbHRhbWVkZm91bmRh dGlvbi5vcmeCFXBsYW5uZWRnaXZpbmcuYXBzLm9yZ4IbcGxhbm5lZGdpdmluZy5i Z2NhcmVuYXYub3Jngh9wbGFubmVkZ2l2aW5nLmJpc2hvcG1hbm9ndWUub3JngiFw bGFubmVkZ2l2aW5nLmJydW5zd2lja3NjaG9vbC5vcmeCGnBsYW5uZWRnaXZpbmcu YnVzaG5lbGwuZWR1ghlwbGFubmVkZ2l2aW5nLmNhbGFydHMuZWR1ghtwbGFubmVk Z2l2aW5nLmNhbGZhcmxleS5vcmeCG3BsYW5uZWRnaXZpbmcuY2F6ZW5vdmlhLmVk dYIpcGxhbm5lZGdpdmluZy5jZW50ZXJmb3JlYXJseWVkdWNhdGlvbi5vcmeCIXBs YW5uZWRnaXZpbmcuY2VudGVyb2Z0aGV3ZXN0Lm9yZ4IXcGxhbm5lZGdpdmluZy5j cmNkcy5lZHWCG3BsYW5uZWRnaXZpbmcuZGFwaGVhbHRoLm9yZ4IgcGxhbm5lZGdp dmluZy5mZW53aWNrZmFsY29ucy5vcmeCGXBsYW5uZWRnaXZpbmcuZ2l2ZWNtaC5v cmeCIHBsYW5uZWRnaXZpbmcuZ3V0aHJpZXRoZWF0ZXIub3Jngh5wbGFubmVkZ2l2 aW5nLm1haW5lYXVkdWJvbi5vcmeCGXBsYW5uZWRnaXZpbmcubXNsZWdhbC5vcmeC FnBsYW5uZWRnaXZpbmcubXRjZi5vcmeCHXBsYW5uZWRnaXZpbmcubXVycmF5c3Rh dGUuZWR1ghlwbGFubmVkZ2l2aW5nLm11c293bHMub3JngiNwbGFubmVkZ2l2aW5n Lm5hdGlvbmFsbXNzb2NpZXR5Lm9yZ4IdcGxhbm5lZGdpdmluZy5ub3J0aGFtcHRv bi5lZHWCInBsYW5uZWRnaXZpbmcubm9ydGh3ZXN0aGFydmVzdC5vcmeCH3BsYW5u ZWRnaXZpbmcubnJoZm91bmRhdGlvbi5vcmeCJXBsYW5uZWRnaXZpbmcub3BlcmF0 aW9uZm9vZHNlYXJjaC5vcmeCIHBsYW5uZWRnaXZpbmcub3JlZ29uZm9vZGJhbmsu b3JnghRwbGFubmVkZ2l2aW5nLm91LmVkdYIWcGxhbm5lZGdpdmluZy5wY29tLmVk dYIccGxhbm5lZGdpdmluZy5wZWdneWFkYW1zLm9yZ4IccGxhbm5lZGdpdmluZy5w cm92aWRlbmNlLmVkdYIacGxhbm5lZGdpdmluZy5wdXJjaGFzZS5lZHWCHXBsYW5u ZWRnaXZpbmcuc2FpbnRwZXRlcnMuZWR1giJwbGFubmVkZ2l2aW5nLnNoYWR5c2lk ZWFjYWRlbXkub3JnghtwbGFubmVkZ2l2aW5nLnNoYW1iaGFsYS5vcmeCFXBsYW5u ZWRnaXZpbmcuc2x1LmVkdYIZcGxhbm5lZGdpdmluZy51ZGFsbGFzLmVkdYIWcGxh bm5lZGdpdmluZy51aHNwLmVkdYIbcGxhbm5lZGdpdmluZy51c20ubWFpbmUuZWR1 gh9wbGFubmVkZ2l2aW5nLnVzbWZvdW5kYXRpb24uY29tghlwbGFubmVkZ2l2aW5n LnZtZmEubXVzZXVtghpwbGFubmVkZ2l2aW5nLnZuYXRleGFzLm9yZ4IacGxhbm5l ZGdpdmluZy53YXJ0YnVyZy5lZHWCIHBsYW5uZWRnaXZpbmcud2F0ZXJmb3JwZW9w bGUub3JnghxwbGFubmVkZ2l2aW5nLndjcmljaG1vbmQub3Jngh1wbGFubmVkZ2l2 aW5nLnltY2Fob3VzdG9uLm9yZ4IYcGxhbm5lZGdpdmluZy55bWNhc2Qub3Jnghlz ZWN1cmVkbnM0LnBsYW5teWdpZnQub3JnghV3d3cuZGF2cGxhbm15Z2lmdC5vcmcw TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1 BIHyAPAAdgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAXzMx+JM AAAEAwBHMEUCIFUc8tsMpfGJrodOpfjM36Tdk1WyhmAYNcDuIvIP00aqAiEArxUJ ncAW4xluKMfeGY5f+1V+ri7TMgkpQ/WDiTWOpJIAdgDfpV6raIJPH2yt7rhfTj5a 6s2iEqRqXo47EsAgRFwqcwAAAXzMx+RJAAAEAwBHMEUCIQCc2pCeCJShvaIGYu/Y BfmsBdy2fMQFT43SHwK83wp6AAIgdITQIzzw0hVZrk66lgIUM02Snb2+VdSUypS8 ZT6QeUswDQYJKoZIhvcNAQELBQADggEBAKU46XCz1lWAU70K8pkmOsLGB/VF6BfT tp8y8lSjFBHYuwNDorcX19z3dkPI2h9ZVwvV0d5/AN6TDMX/Onfh0NWGFniXbrB7 JmOE+AO/um0RrzRQWIMsAMo8/fQAAoERAU9i5VMniZQw+Rk1T4tVnXG0YyLW+PNo 1sBX6LZErKv1ZwFX9uheKYkgv3+yl+LYsoGi3TlF2zdBcC1WI2XRZB1KAHpBzVAa xLVF0BnaO1KWsObiekk4j3JdqcLVDrRIgSVNkWZMl2po8wA8li1bdgTyLrZuWv1B HEhsG0b3w8JdRAz6beLL7B5iJoGp83Q9LkJ45DPFkSDhPWKNos2thAg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijkB5vjvJpMN2ogy8EGw /5YBSCXXontMKTK/QfrEBdooRGyd1on52SluqkjZvdY9Ge+DNuGXWk96pJ2ptpAA dEueesD36PAqCZXZYOEZXjS36klsHLidNL6PDAeqeKrURRKzgh0xLZ6MZcZ9PHml q9b7vIgvs+acM8Gwx+qm8a17zRJ5sS4nUwOZ2eMRE6Um/bG2XxjI0MiOe3+yD4WB XM7XpxXZHjAEcEGPWYUWDuiXXpRpBcio+h9Jj9emu3l3qn60V5rp4xy8CtGN8LwB 9q3Iz4XZ/lhPlRbg1G6VR3lMyZZSl7dvrLrVT4YCFGvwMB+YO8GSzOVbBIPNsELK YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 409060313696568094627652982351112580823446 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-29 15:00:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 15:00:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17448997497076110376106920135085066548964911871347335395083062005214747876214681638239446108355220605583483620697277606634911665701461369923798893981149456259265754148426822039183636886701420202526315325382787873694328265943271159845056670199055222704660561950410602143540903713101353590049715793639995689310084254082739977100292908053879271158825379325179678704781709909896774275089086731279531330978169476270099877696189881140069368231455839887206863039476918208468193729853218950452586328401868441950389616413900839345405639962471485648838410123151137734043020788935750417429372788277422062045081676452791782132323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84a99a51b2dffefd6c2dc7483b9beb864e9b0956 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.murraystate.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shambhala.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017cccc7e24c00000403004730450220551cf2db0ca5f189ae874ea5f8ccdfa4dd9355b286601835c0ee22f20fd346aa022100af15099dc016e3196e28c7de198e5ffb557eae2ed332092943f58389358ea492007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017cccc7e44900000403004730450221009cda909e0894a1bda20662efd805f9ac05dcb67cc4054f8dd21f02bcdf0a7a0002207484d0233cf0d21559ae4eba960214334d929dbdbe55d494ca94bc653e90794b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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