securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:bf:97:a3:50:64:51:66:2e:f2:5b:f5:e6:e9:0d:79:1c was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:bf:97:a3:50:64:51:66:2e:f2:5b:f5:e6:e9:0d:79:1c
Serial Number (int): 321481224269788532503006509374216166275356
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:8e:71:72:c4:4e:50:ed:fa:c4:09:48:a5:42:00:83:81:32:58:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:d1:1e:94:87:c9:71:32:ef:4d:93:5f:f0:1b:a4:16:48:8f:82:f8
Fingerprint (sha256): 24:3a:e0:ab:0f:b7:61:ca:80:ad:32:b7:d2:93:5e:f9:47:30:05:11:27:41:a5:ca:fd:c7:63:54:39:f4:1b:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

davplanmygift.org
divinity.duke.myplannedgift.org
founderssociety.abi.org
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.msu.edu
giftplanning.sarahlawrence.edu
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacyplanning.caritasofaustin.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.fenwickfalcons.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.maineaudubon.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.slu.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINSTCCDDGgAwIBAgISA7C/l6NQZFFmLvJb9ebpDXkcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA0MDcxNjU5MDRaFw0yMjA3MDYxNjU5MDNaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCEcSmJAXQ42rjztUbljOVip944OnxLRoKjHXcbWlFABEO3QdWS
0t4ynVbaOuMw3jNTz+zIkmoMdC269pwDqhAAz7UnHFsIeHEn7pl8LM4SGuNu8hyj
JiToqID2uO3dthnKP/+6uP1ap5ShBJw03fL6UBccwMvcQovcShX7YV3oOVPX+FS6
eqb6MOXLAyYZAt5JZCZsS+ktTEZfNGZByc1MJbWPLwTMliVE2qb9HdAnTTyudVcL
HZLr0P7eHBQT9PCfzK14HlzyGHC6w12Lw8l/8WfYN4PslYcn7zkmULEgaJYhklub
Kt4suhzISPBNt2dkvfYBZRwwSpliJ+TsB5JPAgMBAAGjggplMIIKYTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFJCOcXLETlDt+sQJSKVCAIOBMlinMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIIMwYDVR0RBIIIKjCCCCaCEWRhdnBsYW5teWdpZnQub3Jn
gh9kaXZpbml0eS5kdWtlLm15cGxhbm5lZGdpZnQub3Jnghdmb3VuZGVyc3NvY2ll
dHkuYWJpLm9yZ4IZZ2lmdHBsYW5uaW5nLmRhdmlkc29uLmVkdYIqZ2lmdHBsYW5u
aW5nLmV2ZXJncmVlbmhlYWx0aGZvdW5kYXRpb24uY29tghRnaWZ0cGxhbm5pbmcu
bXN1LmVkdYIeZ2lmdHBsYW5uaW5nLnNhcmFobGF3cmVuY2UuZWR1ghBsZWdhY3ku
Y2FybGUub3Jngg5sZWdhY3kubndmLm9yZ4IfbGVnYWN5Z2l2aW5nLmF0bGFudGFt
aXNzaW9uLm9yZ4IZbGVnYWN5Z2l2aW5nLmNhcHJhZGlvLm9yZ4IibGVnYWN5cGxh
bm5pbmcuY2FyaXRhc29mYXVzdGluLm9yZ4IgbXlsZWdhY3lnaWZ0LmF1Z3VzdGlu
aWFuZnVuZC5vcmeCFW15cGxhbi5zaWVycmFjbHViLm9yZ4IecGxhbm15bGVnYWN5
Lm5vcnRod29vZHRlY2guZWR1ghtwbGFubmVkZ2lmdHMucHJvdmlkZW5jZS5vcmeC
FXBsYW5uZWRnaXZpbmcuYWJpLm9yZ4IjcGxhbm5lZGdpdmluZy5hbHRhbWVkZm91
bmRhdGlvbi5vcmeCFXBsYW5uZWRnaXZpbmcuYXBzLm9yZ4IbcGxhbm5lZGdpdmlu
Zy5iZ2NhcmVuYXYub3Jngh9wbGFubmVkZ2l2aW5nLmJpc2hvcG1hbm9ndWUub3Jn
giBwbGFubmVkZ2l2aW5nLmJpc2hvcG9jb25uZWxsLm9yZ4IhcGxhbm5lZGdpdmlu
Zy5ib3N0b25jaGlsZHJlbnMub3JngiFwbGFubmVkZ2l2aW5nLmJydW5zd2lja3Nj
aG9vbC5vcmeCGnBsYW5uZWRnaXZpbmcuYnVzaG5lbGwuZWR1ghlwbGFubmVkZ2l2
aW5nLmNhbGFydHMuZWR1ghtwbGFubmVkZ2l2aW5nLmNhbGZhcmxleS5vcmeCG3Bs
YW5uZWRnaXZpbmcuY2F6ZW5vdmlhLmVkdYIpcGxhbm5lZGdpdmluZy5jZW50ZXJm
b3JlYXJseWVkdWNhdGlvbi5vcmeCIXBsYW5uZWRnaXZpbmcuY2VudGVyb2Z0aGV3
ZXN0Lm9yZ4IYcGxhbm5lZGdpdmluZy5jZnN3aWEub3JnghdwbGFubmVkZ2l2aW5n
LmNyY2RzLmVkdYIbcGxhbm5lZGdpdmluZy5kYXBoZWFsdGgub3JngiBwbGFubmVk
Z2l2aW5nLmZlbndpY2tmYWxjb25zLm9yZ4IZcGxhbm5lZGdpdmluZy5naXZlY21o
Lm9yZ4IgcGxhbm5lZGdpdmluZy5ndXRocmlldGhlYXRlci5vcmeCHnBsYW5uZWRn
aXZpbmcubWFpbmVhdWR1Ym9uLm9yZ4IncGxhbm5lZGdpdmluZy5tcG5yZXNlYXJj
aGZvdW5kYXRpb24ub3JnghVwbGFubmVkZ2l2aW5nLm1wci5vcmeCGXBsYW5uZWRn
aXZpbmcubXNsZWdhbC5vcmeCFnBsYW5uZWRnaXZpbmcubXRjZi5vcmeCGXBsYW5u
ZWRnaXZpbmcubXVzb3dscy5vcmeCI3BsYW5uZWRnaXZpbmcubmF0aW9uYWxtc3Nv
Y2lldHkub3Jngh1wbGFubmVkZ2l2aW5nLm5vcnRoYW1wdG9uLmVkdYIicGxhbm5l
ZGdpdmluZy5ub3J0aHdlc3RoYXJ2ZXN0Lm9yZ4IfcGxhbm5lZGdpdmluZy5ucmhm
b3VuZGF0aW9uLm9yZ4IlcGxhbm5lZGdpdmluZy5vcGVyYXRpb25mb29kc2VhcmNo
Lm9yZ4IgcGxhbm5lZGdpdmluZy5vcmVnb25mb29kYmFuay5vcmeCFHBsYW5uZWRn
aXZpbmcub3UuZWR1ghZwbGFubmVkZ2l2aW5nLnBjb20uZWR1ghxwbGFubmVkZ2l2
aW5nLnBlZ2d5YWRhbXMub3JnghxwbGFubmVkZ2l2aW5nLnByb3ZpZGVuY2UuZWR1
ghpwbGFubmVkZ2l2aW5nLnB1cmNoYXNlLmVkdYIdcGxhbm5lZGdpdmluZy5zYWlu
dHBldGVycy5lZHWCFXBsYW5uZWRnaXZpbmcuc2VnLm9yZ4IicGxhbm5lZGdpdmlu
Zy5zaGFkeXNpZGVhY2FkZW15Lm9yZ4IVcGxhbm5lZGdpdmluZy5zbHUuZWR1ghlw
bGFubmVkZ2l2aW5nLnVkYWxsYXMuZWR1ghZwbGFubmVkZ2l2aW5nLnVoc3AuZWR1
ghtwbGFubmVkZ2l2aW5nLnVzbS5tYWluZS5lZHWCH3BsYW5uZWRnaXZpbmcudXNt
Zm91bmRhdGlvbi5jb22CGXBsYW5uZWRnaXZpbmcudm1mYS5tdXNldW2CGnBsYW5u
ZWRnaXZpbmcudm5hdGV4YXMub3JnghVwbGFubmVkZ2l2aW5nLnZwci5vcmeCGnBs
YW5uZWRnaXZpbmcud2FydGJ1cmcuZWR1giBwbGFubmVkZ2l2aW5nLndhdGVyZm9y
cGVvcGxlLm9yZ4IccGxhbm5lZGdpdmluZy53Y3JpY2htb25kLm9yZ4IdcGxhbm5l
ZGdpdmluZy55bWNhaG91c3Rvbi5vcmeCGHBsYW5uZWRnaXZpbmcueW1jYXNkLm9y
Z4IZc2VjdXJlZG5zNC5wbGFubXlnaWZ0Lm9yZ4IVd3d3LmRhdnBsYW5teWdpZnQu
b3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAGA
BS4HmgAABAMARzBFAiB6z2Iw//XbGM0qXfRHRe6tZFjKAz4r5SbHgEZJ6g4wowIh
AOcjrpGx0QgRweFH7LN9J9wJYd8bq81Ss0LN3GfX79BKAHYARqVV63X6kSAwtaKJ
afTzfREsQXS+/Um4havy/HD+bUcAAAGABS4HbQAABAMARzBFAiBJZ2GUFYBT24wS
SVzfYl771IauXPW1dqhTwFA5j1hzJAIhAJFoBaxvFqNVxr1tVxfM5tBte2Y4Uk6t
1khcpcJf19HmMA0GCSqGSIb3DQEBCwUAA4IBAQC0jBuQmV7Nztvhd9/a7g6Iwgyb
x96xI2oUH04zc0mLCZes+abvDkYMfGmUenda0jDpAe25AVo6Q8MKSaL7jNnSQQGD
8s7VDmLBJJpqJBpBbWuF5T+Ph1kITkj4HuDEb5AOaBOLwqEfccgHVGqEV9V2VFoi
yFM73A2y9kzGXxCInE/h3yRth5SgF95F/FI357Jq9DA20bvNwteQZVRIdsx8ykMZ
zaLIjTkbc9qH/pNwTIQ+YZB4y/OkfsFD12KCFdUJNEUnv948eMBaTxvOSjZqbxDP
jnnC1GcvGsfqDTSF/hFtKixU7c3i+OF2/iP1vZo809GHJa0YojGsEIogIGxL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHEpiQF0ONq487VG5Yzl
YqfeODp8S0aCox13G1pRQARDt0HVktLeMp1W2jrjMN4zU8/syJJqDHQtuvacA6oQ
AM+1JxxbCHhxJ+6ZfCzOEhrjbvIcoyYk6KiA9rjt3bYZyj//urj9WqeUoQScNN3y
+lAXHMDL3EKL3EoV+2Fd6DlT1/hUunqm+jDlywMmGQLeSWQmbEvpLUxGXzRmQcnN
TCW1jy8EzJYlRNqm/R3QJ008rnVXCx2S69D+3hwUE/Twn8yteB5c8hhwusNdi8PJ
f/Fn2DeD7JWHJ+85JlCxIGiWIZJbmyreLLocyEjwTbdnZL32AWUcMEqZYifk7AeS
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321481224269788532503006509374216166275356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 16:59:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 16:59:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16719258639195586346857537576295726561382293342945518476046908373935090500121041369708624826285529547960740611102398619997689304373622289608286186020420981020669304261931189005919774538119116710278892829042448869011421248834540535976225094719980224944316221002005682395922824867333434769571295790638906313766941768790414307063144453772217354963703601779195556180571347141421461384333811846248770170420410237376100450241718483044529707347150532743736048620773771484075770457069665566216073614307018004938110644473148783847858327629494491452559597249254328352312799778216828841687232042953531741200601811464554524676687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							908e7172c44e50edfac40948a5420083813258a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2090 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000180052e079a000004030047304502207acf6230fff5db18cd2a5df44745eead6458ca033e2be526c7804649ea0e30a3022100e723ae91b1d10811c1e147ecb37d27dc0961df1babcd52b342cddc67d7efd04a00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000180052e076d0000040300473045022049676194158053db8c12495cdf625efbd486ae5cf5b576a853c050398f587324022100916805ac6f16a355c6bd6d5717cce6d06d7b6638524eadd6485ca5c25fd7d1e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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