securedns2.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:e0:9a:58:df:38:c7:c4:2b:14:9d:26:c7:48:e2:7e:82 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns2.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:e0:9a:58:df:38:c7:c4:2b:14:9d:26:c7:48:e2:7e:82
Serial Number (int): 424970942404640735946471325802266431225474
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 88:ae:f7:56:80:7e:c3:b8:7c:34:de:62:9a:f4:ed:14:20:08:08:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:2f:ea:83:ab:4f:3f:88:3b:ca:6f:71:ea:18:06:39:99:7d:7a:5e
Fingerprint (sha256): 3d:9e:c2:df:4b:8e:94:d8:46:01:d5:4a:b0:9a:01:b4:ff:48:50:25:64:c1:bb:85:41:34:0a:7f:98:40:d4:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns2.planmygift.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns2.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1899legacy.appstate.edu
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.uh.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
komengiftplanning.org
legacy.fundforanimals.org
legacy.houstonpublicmedia.org
legacy.savingplaces.org
legacy.wallawalla.edu
legacygift.calvin.edu
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.awr.org
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.bravovail.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.idahohumanesociety.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.thezoosociety.org
plannedgiving.vcs.net
plannedgiving.wamu.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
uoflplannedgifts.org
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.komengiftplanning.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns2.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEXFbP70E407uBadYhxT
swHT4cz2U785Jk9nArX17vQZUxnnTSsMjx4B4wo0Bis8lsRfO5L/e1QcPILphFGc
fPlNuCJTBOnLGBr0ViFR0RqEcrAJ926sMZ+kfpRwwoPgN77Mkp9W9+3hXBF6CR6n
4ENy142AIXVIVuB5QHv4AYV2u4vW2LAsH9ceECnh5cMSoB5OWaNHLqvI+2TQ6gdS
WkHBuvGqlA3WrkLdaI6nnfVRgJgAoSKbew97+lVOqaTtgHx0+dO0qRspbH8eV1sw
OzZTvQktQmqFEhGjnlcIph1GlbIA0yhsUtOfrDtzYv2ht3U8YclH3hJaasPP0Dam
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424970942404640735946471325802266431225474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-20 20:34:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-18 20:34:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns2.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19727581032970618976906591357397676878850962248119207239671673304177400581567204447779373381475646334715148374782528728220805223094500148555577771121866172417013952494803996981849601196471865343833370701864603866130739266519940367406738805405863888920045532780563115198418635756876057324137062183601181037048743250059292112927460295047819743914319002596896174780510523926852884665403015263650688080863217024159860937818940347867239610767901531292501138929623143244904399966288988464495026820191014146190743020788546389457773071084730251872492348618838220794291092216545072264321412799978829596107079908531777339565571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88aef756807ec3b87c34de629af4ed1420080824
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1899legacy.appstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatizoo.myestategift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endowmentfund.klrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.gonzaga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.f4mmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.gsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.miamioh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.quincy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.temple.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khpfoundation.championscirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.fundforanimals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.houstonpublicmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.savingplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wallawalla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.calvin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyofpeace.afsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.acs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.monmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.cgu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktrustlegacy.pikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.kvc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.pnwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.witc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adelphi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.advance.einstein.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aesnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arthritis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aurora.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.awr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.biglife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.butler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calstatela.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.campbellsville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.capitalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrenswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioceseofprovidence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idahohumanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.landconserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohsufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rmhcbayarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishriteforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slpl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sluh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.smiletrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stepupforstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thezoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wamu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.yctorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns2.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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