*.planmylegacy.org

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b9:ef:07:7d:27:82:26:f9:12:6c:45:62:b6:86:7c:01 was issued on by COMODO CA Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.planmylegacy.org,OU=Domain Control Validated+OU=PositiveSSL Multi-Domain

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): b9:ef:07:7d:27:82:26:f9:12:6c:45:62:b6:86:7c:01
Serial Number (int): 247148290062014059919233756751913712641
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7c:27:de:43:ec:52:1d:cf:87:b2:3b:11:79:6c:07:f2:94:0f:15:7e
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): c5:bf:38:32:75:3a:97:ce:f6:f8:d0:56:29:c6:f5:e3:9e:61:c0:e3
Fingerprint (sha256): 2e:73:16:4d:2b:20:b8:de:d0:d1:0f:f9:fe:7d:50:0e:ef:94:e4:0b:be:ab:35:c4:0e:0d:e2:03:47:2d:b2:4d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate *.planmylegacy.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.planmylegacy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.planmylegacy.org
*.makeaplannedgift.org
*.myfuturegift.org
*.mylegacygift.org
*.myplannedgift.org
*.pglegacy.org
*.planmygift.org
*.planningyourlegacy.org
makeaplannedgift.org
myfuturegift.org
mylegacygift.org
myplannedgift.org
pglegacy.org
planmygift.org
planmylegacy.org
planningyourlegacy.org

Other certificates including the domain name planmylegacy.org

(limited to 100 certificates)
*.planmylegacy.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
click.planmylegacy.org
*.planmylegacy.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
planmygift.org
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
planmygift.org
planmygift.org
securedns4.planmygift.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
planmygift.org
*.planmylegacy.org
san-1-s6.tlsprovisioning.exacttarget.com
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
san-1-s6.tlsprovisioning.exacttarget.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
san-1-s6.tlsprovisioning.exacttarget.com
image.20210419.200345.s6.et.yellsatcloud.com
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
*.planmylegacy.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
planmygift.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
san-1-s6.tlsprovisioning.exacttarget.com
image.20210419.200345.s6.et.yellsatcloud.com
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
corsproxy.makeaplannedgift.org
securedns4.planmygift.org
san-1-s6.tlsprovisioning.exacttarget.com
san-1-s6.tlsprovisioning.exacttarget.com
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
*.planmylegacy.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
*.planmylegacy.org
san-1-s6.tlsprovisioning.exacttarget.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
securedns4.planmygift.org
securedns4.planmygift.org
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com
image.20210419.200345.s6.et.yellsatcloud.com

Certificate

The complete raw certificate details for *.planmylegacy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nzps/QRc3wETBNM5fjS
p+azmLiEm1i+uwJg83SXFEZ8k3VWnexqyzAt3Xgo2/de54rC14Lvz52BOkFHIpY2
jVKruQdb059Bt8PyUbj3Q/tAKB4scu2UKZbBCR7UPmZR/A8X46A7wS4bIyVNvoxH
D2S7VuNryL66poM8ojS4l4UoSpqcJN65YLTSxv4P25fQsUZAUKF4YfE+rvCfBFF3
tcam+QBaDsuLElu/c0JwtNBdVG6IxXZjDHwkF9QHu1B/4hNc6D1LQ3sPHXs8hJyx
PTO+p3WZw+CaN8HoKZPW63ib7CXRg7/3fNc2Kf2DCPznsF2zBufggx4cyy2UW6up
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247148290062014059919233756751913712641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL Multi-Domain'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.planmylegacy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27076594110518286815423984302809122499128327888805379386042839699701804663667971137633255678619276348994271471169632034165576210686030522453398597908625555954380976686545523568352734350675662942894457961264212389586532102134603815070588725274150041698607947728789022648549297165409826059354723416221371032527257273675146229058970968729107947166385816780066617603331821899663424077839342869320400946989334900513253372378091009497909886564523394496390291728898400892102522002349872321586605752401511874942521638683497996325622082680013193936303870790051796798911769678028068874181515542449617978134569006218151857990111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c27de43ec521dcf87b23b11796c07f2940f157e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeaplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfuturegift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylegacygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pglegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planningyourlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeaplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfuturegift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pglegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningyourlegacy.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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