securedns3.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:84:c6:e8:85:f7:01:8f:2a:1a:ee:7f:05:bf:b7:3f:95:e0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns3.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:c6:e8:85:f7:01:8f:2a:1a:ee:7f:05:bf:b7:3f:95:e0
Serial Number (int): 306518524702011526526815596656771349845472
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:8a:8d:a5:d9:4f:1e:99:c9:a5:5e:de:7b:b2:f0:12:be:c9:ba:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:9a:37:6b:a6:16:a1:7f:c1:9d:e8:61:cd:20:6e:8a:f1:3c:1c:62
Fingerprint (sha256): 0b:4a:b1:94:af:f6:4d:3e:bd:9a:e0:83:ba:44:12:5e:0a:bd:f0:dc:d8:e9:a0:47:a4:af:fb:dd:a2:5f:8b:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns3.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns3.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftplanning.du.edu
giftplanning.msu.edu
giftplanning.nyu.edu
giftplanning.radyfoundation.org
giftplanning.uwm.edu
giftplanning.villanova.edu
giftplanning.wsu.edu
legacy.crisiscenter.com
legacy.lmu.edu
legacygift.ascefoundation.org
meyerjcf.org
myplannedgift.ridgeviewmedical.org
pg.unthsc.edu
planmygift.morris.umn.edu
planmylegacy.uwf.edu
plannedgiving.bannerhealthfoundation.org
plannedgiving.brrh.com
plannedgiving.caldwell.edu
plannedgiving.caramoor.org
plannedgiving.carenewengland.org
plannedgiving.centre.edu
plannedgiving.clf.org
plannedgiving.cristoreybalt.org
plannedgiving.culinary.edu
plannedgiving.cvtc.edu
plannedgiving.dar.org
plannedgiving.davidson.edu
plannedgiving.edwardfoundation.org
plannedgiving.fasterfarther.gmu.edu
plannedgiving.feedingamerica.org
plannedgiving.fenwickfalcons.org
plannedgiving.fhu.edu
plannedgiving.fortlewis.edu
plannedgiving.fvtc.edu
plannedgiving.geron.org
plannedgiving.hheonline.org
plannedgiving.hsutx.edu
plannedgiving.idyllwildarts.org
plannedgiving.innovia.org
plannedgiving.jbu.edu
plannedgiving.kentri.org
plannedgiving.kiddo.org
plannedgiving.kzoo.edu
plannedgiving.lagrangesymphony.org
plannedgiving.latinschool.org
plannedgiving.lwv.org
plannedgiving.macomb.edu
plannedgiving.mannafoodbank.org
plannedgiving.maryvale.org
plannedgiving.mc.edu
plannedgiving.mcgeheeschool.com
plannedgiving.mcm.edu
plannedgiving.mines.edu
plannedgiving.morehouse.edu
plannedgiving.msffoundation.org
plannedgiving.newmanschool.org
plannedgiving.northcross.org
plannedgiving.northmemorial.com
plannedgiving.nycballet.com
plannedgiving.odu.edu
plannedgiving.ollusa.edu
plannedgiving.ozarks.edu
plannedgiving.rosemont.edu
plannedgiving.rpbusa.org
plannedgiving.salk.edu
plannedgiving.sbschool.org
plannedgiving.scottishritehospital.org
plannedgiving.semesteratsea.org
plannedgiving.sfhscollegeprep.org
plannedgiving.sinclair.edu
plannedgiving.spa.edu
plannedgiving.stac.edu
plannedgiving.sths.org
plannedgiving.stjudemedicalcenter.org
plannedgiving.stmarysdominican.org
plannedgiving.stolaf.edu
plannedgiving.stpiusx.org
plannedgiving.tcu.edu
plannedgiving.thearcsf.org
plannedgiving.thefutureofhealthcare.org
plannedgiving.thomasu.edu
plannedgiving.txaglandtrust.org
plannedgiving.uconn.edu
plannedgiving.ucsb.edu
plannedgiving.ulpgh.org
plannedgiving.umbwmc.org
plannedgiving.unt.edu
plannedgiving.uua.org
plannedgiving.vnacarenewengland.org
plannedgiving.vwu.edu
plannedgiving.walsh.edu
plannedgiving.waterforpeople.org
plannedgiving.williamson.edu
plannedgiving.wlc.edu
plannedgiving.wlrn.org
plannedgiving.womans.org
plannedgiving.wqed.org
plannedgiving.ywca.org
securedns3.planmygift.org
www.meyerjcf.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns3.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP3jCCDsagAwIBAgISA4TG6IX3AY8qGu5/Bb+3P5XgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MjQxMzU4MDlaFw0yMzA3MjMxMzU4MDhaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczMucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCJ/UvSjdKsdS/7tiXN2YLlnttHH1kwSTHLK5YM238fmxmY58CC
qyIFpXx0PeSRVsXQM/DQa3rOe0keCO52zKu32PYeNBY5KHNczBGrdR5gHiaSdEXh
RVqFxRNbXc3axrfUQJA+LRcup8WZLzoSklwgIcazVxC3Bhe3MLOpBLc4yfINgslt
Zwb11ejsdxLoITB9nvA0cQ07s2Yp7bBh6p0axwwkJKfdKe9i8a+KQN6aR42riASQ
/wgYmLscSKcoiWbGXMWtkMjBv4JuiB1m7QSjZ/IKGoForI5AbvdsBYtCK3piTTQ1
GgDf1ljBV/BJWTfaAZd6dzVniNRo2NuJ7Mw7AgMBAAGjggz6MIIM9jAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFJqKjaXZTx6ZyaVe3nuy8BK+ybrUMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIKxwYDVR0RBIIKvjCCCrqCE2dpZnRwbGFubmluZy5kdS5l
ZHWCFGdpZnRwbGFubmluZy5tc3UuZWR1ghRnaWZ0cGxhbm5pbmcubnl1LmVkdYIf
Z2lmdHBsYW5uaW5nLnJhZHlmb3VuZGF0aW9uLm9yZ4IUZ2lmdHBsYW5uaW5nLnV3
bS5lZHWCGmdpZnRwbGFubmluZy52aWxsYW5vdmEuZWR1ghRnaWZ0cGxhbm5pbmcu
d3N1LmVkdYIXbGVnYWN5LmNyaXNpc2NlbnRlci5jb22CDmxlZ2FjeS5sbXUuZWR1
gh1sZWdhY3lnaWZ0LmFzY2Vmb3VuZGF0aW9uLm9yZ4IMbWV5ZXJqY2Yub3JngiJt
eXBsYW5uZWRnaWZ0LnJpZGdldmlld21lZGljYWwub3Jngg1wZy51bnRoc2MuZWR1
ghlwbGFubXlnaWZ0Lm1vcnJpcy51bW4uZWR1ghRwbGFubXlsZWdhY3kudXdmLmVk
dYIocGxhbm5lZGdpdmluZy5iYW5uZXJoZWFsdGhmb3VuZGF0aW9uLm9yZ4IWcGxh
bm5lZGdpdmluZy5icnJoLmNvbYIacGxhbm5lZGdpdmluZy5jYWxkd2VsbC5lZHWC
GnBsYW5uZWRnaXZpbmcuY2FyYW1vb3Iub3JngiBwbGFubmVkZ2l2aW5nLmNhcmVu
ZXdlbmdsYW5kLm9yZ4IYcGxhbm5lZGdpdmluZy5jZW50cmUuZWR1ghVwbGFubmVk
Z2l2aW5nLmNsZi5vcmeCH3BsYW5uZWRnaXZpbmcuY3Jpc3RvcmV5YmFsdC5vcmeC
GnBsYW5uZWRnaXZpbmcuY3VsaW5hcnkuZWR1ghZwbGFubmVkZ2l2aW5nLmN2dGMu
ZWR1ghVwbGFubmVkZ2l2aW5nLmRhci5vcmeCGnBsYW5uZWRnaXZpbmcuZGF2aWRz
b24uZWR1giJwbGFubmVkZ2l2aW5nLmVkd2FyZGZvdW5kYXRpb24ub3JngiNwbGFu
bmVkZ2l2aW5nLmZhc3RlcmZhcnRoZXIuZ211LmVkdYIgcGxhbm5lZGdpdmluZy5m
ZWVkaW5nYW1lcmljYS5vcmeCIHBsYW5uZWRnaXZpbmcuZmVud2lja2ZhbGNvbnMu
b3JnghVwbGFubmVkZ2l2aW5nLmZodS5lZHWCG3BsYW5uZWRnaXZpbmcuZm9ydGxl
d2lzLmVkdYIWcGxhbm5lZGdpdmluZy5mdnRjLmVkdYIXcGxhbm5lZGdpdmluZy5n
ZXJvbi5vcmeCG3BsYW5uZWRnaXZpbmcuaGhlb25saW5lLm9yZ4IXcGxhbm5lZGdp
dmluZy5oc3V0eC5lZHWCH3BsYW5uZWRnaXZpbmcuaWR5bGx3aWxkYXJ0cy5vcmeC
GXBsYW5uZWRnaXZpbmcuaW5ub3ZpYS5vcmeCFXBsYW5uZWRnaXZpbmcuamJ1LmVk
dYIYcGxhbm5lZGdpdmluZy5rZW50cmkub3JnghdwbGFubmVkZ2l2aW5nLmtpZGRv
Lm9yZ4IWcGxhbm5lZGdpdmluZy5rem9vLmVkdYIicGxhbm5lZGdpdmluZy5sYWdy
YW5nZXN5bXBob255Lm9yZ4IdcGxhbm5lZGdpdmluZy5sYXRpbnNjaG9vbC5vcmeC
FXBsYW5uZWRnaXZpbmcubHd2Lm9yZ4IYcGxhbm5lZGdpdmluZy5tYWNvbWIuZWR1
gh9wbGFubmVkZ2l2aW5nLm1hbm5hZm9vZGJhbmsub3JnghpwbGFubmVkZ2l2aW5n
Lm1hcnl2YWxlLm9yZ4IUcGxhbm5lZGdpdmluZy5tYy5lZHWCH3BsYW5uZWRnaXZp
bmcubWNnZWhlZXNjaG9vbC5jb22CFXBsYW5uZWRnaXZpbmcubWNtLmVkdYIXcGxh
bm5lZGdpdmluZy5taW5lcy5lZHWCG3BsYW5uZWRnaXZpbmcubW9yZWhvdXNlLmVk
dYIfcGxhbm5lZGdpdmluZy5tc2Zmb3VuZGF0aW9uLm9yZ4IecGxhbm5lZGdpdmlu
Zy5uZXdtYW5zY2hvb2wub3JnghxwbGFubmVkZ2l2aW5nLm5vcnRoY3Jvc3Mub3Jn
gh9wbGFubmVkZ2l2aW5nLm5vcnRobWVtb3JpYWwuY29tghtwbGFubmVkZ2l2aW5n
Lm55Y2JhbGxldC5jb22CFXBsYW5uZWRnaXZpbmcub2R1LmVkdYIYcGxhbm5lZGdp
dmluZy5vbGx1c2EuZWR1ghhwbGFubmVkZ2l2aW5nLm96YXJrcy5lZHWCGnBsYW5u
ZWRnaXZpbmcucm9zZW1vbnQuZWR1ghhwbGFubmVkZ2l2aW5nLnJwYnVzYS5vcmeC
FnBsYW5uZWRnaXZpbmcuc2Fsay5lZHWCGnBsYW5uZWRnaXZpbmcuc2JzY2hvb2wu
b3JngiZwbGFubmVkZ2l2aW5nLnNjb3R0aXNocml0ZWhvc3BpdGFsLm9yZ4IfcGxh
bm5lZGdpdmluZy5zZW1lc3RlcmF0c2VhLm9yZ4IhcGxhbm5lZGdpdmluZy5zZmhz
Y29sbGVnZXByZXAub3JnghpwbGFubmVkZ2l2aW5nLnNpbmNsYWlyLmVkdYIVcGxh
bm5lZGdpdmluZy5zcGEuZWR1ghZwbGFubmVkZ2l2aW5nLnN0YWMuZWR1ghZwbGFu
bmVkZ2l2aW5nLnN0aHMub3JngiVwbGFubmVkZ2l2aW5nLnN0anVkZW1lZGljYWxj
ZW50ZXIub3JngiJwbGFubmVkZ2l2aW5nLnN0bWFyeXNkb21pbmljYW4ub3Jnghhw
bGFubmVkZ2l2aW5nLnN0b2xhZi5lZHWCGXBsYW5uZWRnaXZpbmcuc3RwaXVzeC5v
cmeCFXBsYW5uZWRnaXZpbmcudGN1LmVkdYIacGxhbm5lZGdpdmluZy50aGVhcmNz
Zi5vcmeCJ3BsYW5uZWRnaXZpbmcudGhlZnV0dXJlb2ZoZWFsdGhjYXJlLm9yZ4IZ
cGxhbm5lZGdpdmluZy50aG9tYXN1LmVkdYIfcGxhbm5lZGdpdmluZy50eGFnbGFu
ZHRydXN0Lm9yZ4IXcGxhbm5lZGdpdmluZy51Y29ubi5lZHWCFnBsYW5uZWRnaXZp
bmcudWNzYi5lZHWCF3BsYW5uZWRnaXZpbmcudWxwZ2gub3JnghhwbGFubmVkZ2l2
aW5nLnVtYndtYy5vcmeCFXBsYW5uZWRnaXZpbmcudW50LmVkdYIVcGxhbm5lZGdp
dmluZy51dWEub3JngiNwbGFubmVkZ2l2aW5nLnZuYWNhcmVuZXdlbmdsYW5kLm9y
Z4IVcGxhbm5lZGdpdmluZy52d3UuZWR1ghdwbGFubmVkZ2l2aW5nLndhbHNoLmVk
dYIgcGxhbm5lZGdpdmluZy53YXRlcmZvcnBlb3BsZS5vcmeCHHBsYW5uZWRnaXZp
bmcud2lsbGlhbXNvbi5lZHWCFXBsYW5uZWRnaXZpbmcud2xjLmVkdYIWcGxhbm5l
ZGdpdmluZy53bHJuLm9yZ4IYcGxhbm5lZGdpdmluZy53b21hbnMub3JnghZwbGFu
bmVkZ2l2aW5nLndxZWQub3JnghZwbGFubmVkZ2l2aW5nLnl3Y2Eub3JnghlzZWN1
cmVkbnMzLnBsYW5teWdpZnQub3JnghB3d3cubWV5ZXJqY2Yub3JnMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA
tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGHs8WvdQAABAMASDBG
AiEAjK9fdBeaik971AIzx6zToWeAanzpODAja9WDLOfReAgCIQD8mMteYDihofB2
haoorrXQi9Nyy+cEXtkSG0q2owHN8QB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EM
JMqFhjTr3IKKAAABh7PFr6gAAAQDAEcwRQIgf8htzRXS4LU6GcMlyh+Jy3WAs2nP
sQ09HdlhILwxhcoCIQD5iOZSsjUGPNz3c4fyKenxsRDo8NKPFkS3oGvElyAT/jAN
BgkqhkiG9w0BAQsFAAOCAQEAtXpJstTeDbLWUIm7zC6vpl8i0doRhJL1Y9hg1Ac4
dLR6UwFp6hHYlUkEQU5Flp+8RYfP/zzbAvhYgrbRZMH0kQ/BqyaDWfZHMN0KhKN6
OfeDalsSkU5U9oNbyLa9KdU3Il8Mcpr0V7B7htm/CcJCVFJOTOjKc6fCQ1/uuPbW
jts/ddGnZ3zaFd0gQYqx64BCoW/71EMzNXvzNwn1+WmEHzi7Rn5B59dTZOD8afJs
wThfjQsvJX+FvRw0r+qOOnyTIbFZ10fr/zCJ8ldjaUNsegEA6MIqsElj7xhLs3Ua
5xmpUl8iIuqN6pc5ZTLMeAxLblXbrRXNaePBpSykNrmYqw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif1L0o3SrHUv+7YlzdmC
5Z7bRx9ZMEkxyyuWDNt/H5sZmOfAgqsiBaV8dD3kkVbF0DPw0Gt6zntJHgjudsyr
t9j2HjQWOShzXMwRq3UeYB4mknRF4UVahcUTW13N2sa31ECQPi0XLqfFmS86EpJc
ICHGs1cQtwYXtzCzqQS3OMnyDYLJbWcG9dXo7HcS6CEwfZ7wNHENO7NmKe2wYeqd
GscMJCSn3SnvYvGvikDemkeNq4gEkP8IGJi7HEinKIlmxlzFrZDIwb+CbogdZu0E
o2fyChqBaKyOQG73bAWLQit6Yk00NRoA39ZYwVfwSVk32gGXenc1Z4jUaNjbiezM
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306518524702011526526815596656771349845472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 13:58:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-23 13:58:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns3.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17419552782745039024127229253704375745734543101132687242274820057217939438091966178332883301825728074324603047400268349622527786946537896832558699365400387777819715222912896172163577235944682762874603471201645878949810174710759066755218578115437577847530517420240246170458744048199284130360498084277227584989927251587444217730142054065977718034594693403140177981225866666055729219641944434133125979490983537524982762348171949660803324654778317277880108380963400400571683815686316399171486989854333426891139516712026512185314822758778979427623419943930967285020464308632561048048213693933283260555608946833903166737467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a8a8da5d94f1e99c9a55ede7bb2f012bec9bad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.radyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.villanova.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.crisiscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.ascefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyerjcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ridgeviewmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.morris.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.uwf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bannerhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caldwell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caramoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.carenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreybalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.culinary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edwardfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fasterfarther.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fortlewis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.geron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hheonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsutx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idyllwildarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.innovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.jbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kentri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kiddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kzoo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lagrangesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.latinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.macomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mannafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maryvale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcgeheeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.morehouse.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msffoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.newmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nycballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ollusa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ozarks.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rosemont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rpbusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.salk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sbschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishritehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.semesteratsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sfhscollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sinclair.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjudemedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stmarysdominican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stolaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stpiusx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thearcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thefutureofhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thomasu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.txaglandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ulpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.unt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnacarenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walsh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.williamson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ywca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns3.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meyerjcf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187b3c5af7500000403004830460221008caf5f74179a8a4f7bd40233c7acd3a167806a7ce93830236bd5832ce7d17808022100fc98cb5e6038a1a1f07685aa28aeb5d08bd372cbe7045ed9121b4ab6a301cdf1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187b3c5afa8000004030047304502207fc86dcd15d2e0b53a19c325ca1f89cb7580b369cfb10d3d1dd96120bc3185ca022100f988e652b235063cdcf77387f229e9f1b110e8f0d28f1644b7a06bc4972013fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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