securedns2.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6f:19:12:af:f5:30:78:c0:a1:81:43:1d:eb:9c:7e:f1:8a was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns2.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:19:12:af:f5:30:78:c0:a1:81:43:1d:eb:9c:7e:f1:8a
Serial Number (int): 299141528253590567624306658706143420805514
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:fe:e8:a8:ca:58:4e:ba:93:e3:36:93:e1:67:d7:7d:91:3c:48:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 73:3e:ae:d2:3b:3d:17:79:b1:ff:24:ba:29:4b:9c:74:3b:0e:0b:65
Fingerprint (sha256): 25:63:01:0f:44:66:9f:55:84:41:b4:d1:51:90:f7:6d:46:eb:6f:fc:7c:6a:b8:e6:71:2b:81:c6:4f:dc:4e:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns2.planmygift.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns2.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1899legacy.appstate.edu
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.usfca.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
legacy.lmu.edu
legacy.savingplaces.org
legacy.wallawalla.edu
legacygiving.easterseals.com
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgifts.providence.org
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.bravovail.org
plannedgiving.brunswickschool.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.cfswia.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.dunnschool.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.mercyone.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.vcs.net
plannedgiving.wamu.org
plannedgiving.wbu.edu
plannedgiving.womenandinfants.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
uoflplannedgifts.org
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns2.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgy8Qf35GuGnVMskROT9
TGJP0c9bknXGpcVe/dX34uLCUcXY3glzZTWZYkQ7dGOaLxR7MJgSVec9nvndRJ9h
vAP2hGTyqgB2lVzEJ1zoa4NopL8etcF87f3qWpeXYjSHOFskzsgC3tyVU9/zqiDA
28gKcq56WKxvFyWcFsY3iFBYgEWMEXOSjzhBR7Pw1av+FKvdnG2CEpnDkBoGYBSI
BhKrCvHB6kLOLfGKFAzP3WHKVH7WktZUnu2quFKYPaYdIcmZkp9+1ud/HOj34LfZ
uif6BdfrEbaAJFKNNH5ESlyVNjizuQgtrTekv92ZJnCP6fcY0VhySKLOKSalCqzP
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299141528253590567624306658706143420805514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 17:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 17:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns2.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21466791895134781188080314180591034442420604830621008238410882090765249719774757327987649367554182209727668002129342544611272789523016321475680420218343971710922799267871385157341554405418851561445036948593793618781855488953667782705304473958966785183615295535755786756928767040774975001502631510437597026945402567535489133915112940771973570559726538329941971010359700140242519553001067836864042381968105418650934010514377185435403441010637276839385612553956660337013369079921635495210887234720200864605363624960808734702701227204882839981550713446618966139476339393168109921895856051428653785633672235822303421452191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33fee8a8ca584eba93e33693e167d77d913c487d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1899legacy.appstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatizoo.myestategift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endowmentfund.klrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.gonzaga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.f4mmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.gsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.miamioh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.quincy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.temple.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.usfca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khpfoundation.championscirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.savingplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wallawalla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.easterseals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyofpeace.afsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.acs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.monmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.cgu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktrustlegacy.pikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.kvc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.pnwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.witc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adelphi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.advance.einstein.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aesnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arthritis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aurora.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.biglife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.butler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calstatela.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.campbellsville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.capitalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrenswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioceseofprovidence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dunnschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.landconserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mercyone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohsufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rmhcbayarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishriteforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slpl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sluh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.smiletrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stepupforstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wamu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womenandinfants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.yctorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns2.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018486c60fee0000040300463044022019bb6141ad0a4851dc7e481d91b2d32b418939a428cd856b17b8d044269495b602206d75302160aa0e97b9869b416705fc0de342a8811391cf9159f6515d4090f10c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018486c610240000040300473045022100f3abaabb679194d49b1baa117aa6059b3d0b26dcf03f61f9502e3981bb0b245702206909657d5ba70b4903e6b5a157f1cb76db07c3a1dec53f5cbef780c1b3abd77d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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