securedns2.planmygift.org
Issued by R3
About this certificate
This digital certificate with serial number 04:3e:85:1c:d8:54:1e:81:26:dd:62:ca:ae:8a:59:36:ed:88 was issued on by Let's Encrypt.
With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=securedns2.planmygift.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3e:85:1c:d8:54:1e:81:26:dd:62:ca:ae:8a:59:36:ed:88Serial Number (int): 369723587571555684832712790916910598778248
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5f:aa:73:54:e9:74:5e:44:9d:1c:ac:52:7a:ad:59:50:2b:be:ac:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 58:3c:b3:62:3e:6e:cc:d5:e7:43:cb:62:c4:31:5d:05:45:25:0a:70
Fingerprint (sha256): 42:e1:f5:e8:1f:7f:ce:a6:71:ce:c9:8c:e0:c0:6f:cb:7a:9e:ac:29:7e:1e:2e:0f:85:30:f2:02:b8:38:c9:43
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate securedns2.planmygift.org
92
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for securedns2.planmygift.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
1899legacy.appstate.edu
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.usfca.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
komengiftplanning.org
legacy.lmu.edu
legacy.savingplaces.org
legacy.wallawalla.edu
legacygiving.easterseals.com
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgifts.providence.org
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.bravovail.org
plannedgiving.brunswickschool.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.cfswia.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.dunnschool.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.mercyone.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.vcs.net
plannedgiving.wamu.org
plannedgiving.wbu.edu
plannedgiving.womenandinfants.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
uoflplannedgifts.org
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.komengiftplanning.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.usfca.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
komengiftplanning.org
legacy.lmu.edu
legacy.savingplaces.org
legacy.wallawalla.edu
legacygiving.easterseals.com
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgifts.providence.org
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.bravovail.org
plannedgiving.brunswickschool.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.cfswia.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.dunnschool.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.mercyone.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.vcs.net
plannedgiving.wamu.org
plannedgiving.wbu.edu
plannedgiving.womenandinfants.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
uoflplannedgifts.org
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.komengiftplanning.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org
Other certificates including the domain name planmygift.org
(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org
Certificate
The complete raw certificate details for securedns2.planmygift.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINtDCCDJygAwIBAgISBD6FHNhUHoEm3WLKropZNu2IMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA1MTIyMDA5MDJaFw0yMjA4MTAyMDA5MDFaMCQxIjAgBgNVBAMT GXNlY3VyZWRuczIucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCFFkTBFjGCYtejuKAHTUNmDPGRjJUaAYzt/XJdpNB1kRbLG+re kKwuDEH+42YiqPBSSqG4mRXp/qCj+1vkIs6XwwQ0Enp95mkmp8i1ch7D/jI5TjsU BpL3h4iL8UPtnPrQ6xuGUNOmhtakB3lqyTKSr3XVdDztTzmP7mIr2tAozbva5V4V pZGhxQCSi7QhB6jjOuUZHOvyOb86wHYdZGGI9r87QE9xk+otxywr2YrOL38Wvn2i dzo9DSfQfoxoZDVMHOHJ09BbLXWP1/BiLxWD6vcoets7yLm9Meh3Iw3S8XZeEtQZ ATQeqpgK7/Gw/0UA47WBXxaTunUcQIBJn699AgMBAAGjggrQMIIKzDAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFF+qc1TpdF5EnRysUnqtWVArvqzNMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIIJkQYDVR0RBIIJiDCCCYSCFzE4OTlsZWdhY3kuYXBwc3Rh dGUuZWR1gh5jaW5jaW5uYXRpem9vLm15ZXN0YXRlZ2lmdC5vcmeCFmVuZG93bWVu dGZ1bmQua2xybi5vcmeCE2ZvcmV2ZXIuZ29uemFnYS5vcmeCFGdldGluY29tZWZv cmxpZmUub3JnghRnaWZ0cGxhbm5pbmcuY2hxLm9yZ4IWZ2lmdHBsYW5uaW5nLmY0 bW1jLm9yZ4IUZ2lmdHBsYW5uaW5nLmdzdS5lZHWCE2dpZnRwbGFubmluZy5ody5j b22CGGdpZnRwbGFubmluZy5taWFtaW9oLmVkdYIdZ2lmdHBsYW5uaW5nLm51Zm91 bmRhdGlvbi5vcmeCF2dpZnRwbGFubmluZy5xdWluY3kuZWR1ghdnaWZ0cGxhbm5p bmcudGVtcGxlLmVkdYIWZ2lmdHBsYW5uaW5nLnVzZmNhLmVkdYIcaW5kaWFueW91 dGhjaXJjbGVzb2NpZXR5Lm9yZ4IRay1zdGF0ZWxlZ2FjeS5vcmeCKGtocGZvdW5k YXRpb24uY2hhbXBpb25zY2lyY2xlc29jaWV0eS5vcmeCFWtvbWVuZ2lmdHBsYW5u aW5nLm9yZ4IObGVnYWN5LmxtdS5lZHWCF2xlZ2FjeS5zYXZpbmdwbGFjZXMub3Jn ghVsZWdhY3kud2FsbGF3YWxsYS5lZHWCHGxlZ2FjeWdpdmluZy5lYXN0ZXJzZWFs cy5jb22CFmxlZ2FjeW9mcGVhY2UuYWZzYy5vcmeCFmxlZ2FjeXBsYW5uaW5nLmFj cy5vcmeCFm1hcnliaXJkZm91bmRhdGlvbi5vcmeCE211bHRpY2FyZWxlZ2FjeS5v cmeCFW15bGVnYWN5Lm1vbm1vdXRoLmVkdYITbXlsZWdhY3kudXRleGFzLmVkdYIV bXlwbGFubmVkZ2lmdC5jZ3UuZWR1ghpteXBsYW5uZWRnaWZ0LnVjb2xsZWdlLmVk dYIUbXlyZWR3b29kc2xlZ2FjeS5vcmeCCW5jZ3BjLm9yZ4IYb2FrdHJ1c3RsZWdh Y3kucGlrZXMub3JnghVvdXJhbWVyaWNhbmxlZ2FjeS5vcmeCEXBsYW4uc3RtYXJ5 dHguZWR1ghJwbGFubXlnaWZ0Lmt2Yy5vcmeCFXBsYW5teWxlZ2FjeS5wbnd1LmVk dYIVcGxhbm15bGVnYWN5LndpdGMuZWR1ghtwbGFubmVkZ2lmdHMucHJvdmlkZW5j ZS5vcmeCGXBsYW5uZWRnaXZpbmcuYWRlbHBoaS5lZHWCInBsYW5uZWRnaXZpbmcu YWR2YW5jZS5laW5zdGVpbi5lZHWCGHBsYW5uZWRnaXZpbmcuYWVzbmV0Lm9yZ4IW cGxhbm5lZGdpdmluZy5hbG1hLmVkdYIbcGxhbm5lZGdpdmluZy5hcnRocml0aXMu b3Jngh1wbGFubmVkZ2l2aW5nLmF0bGFudGljYXJlLm9yZ4IYcGxhbm5lZGdpdmlu Zy5hdXJvcmEuZWR1ghpwbGFubmVkZ2l2aW5nLmJhbGxldGF6Lm9yZ4IZcGxhbm5l ZGdpdmluZy5iaWdsaWZlLm9yZ4IbcGxhbm5lZGdpdmluZy5icmF2b3ZhaWwub3Jn giFwbGFubmVkZ2l2aW5nLmJydW5zd2lja3NjaG9vbC5vcmeCGHBsYW5uZWRnaXZp bmcuYnV0bGVyLm9yZ4IccGxhbm5lZGdpdmluZy5jYWxzdGF0ZWxhLmVkdYIgcGxh bm5lZGdpdmluZy5jYW1wYmVsbHN2aWxsZS5lZHWCH3BsYW5uZWRnaXZpbmcuY2Fw aXRhbGhlYWx0aC5vcmeCGHBsYW5uZWRnaXZpbmcuY2Zzd2lhLm9yZ4IdcGxhbm5l ZGdpdmluZy5jaGlsZHJlbnN3aS5vcmeCFXBsYW5uZWRnaXZpbmcuY2h3Lm9yZ4Il cGxhbm5lZGdpdmluZy5kaW9jZXNlb2Zwcm92aWRlbmNlLm9yZ4IccGxhbm5lZGdp dmluZy5kdW5uc2Nob29sLm9yZ4IccGxhbm5lZGdpdmluZy5sYWZvb2RiYW5rLm9y Z4IecGxhbm5lZGdpdmluZy5sYW5kY29uc2VydmUub3JnghpwbGFubmVkZ2l2aW5n Lm1lcmN5b25lLm9yZ4IncGxhbm5lZGdpdmluZy5tcG5yZXNlYXJjaGZvdW5kYXRp b24ub3Jngh5wbGFubmVkZ2l2aW5nLm5vcnRoZWFzdGVybi5lZHWCIHBsYW5uZWRn aXZpbmcub2hzdWZvdW5kYXRpb24ub3Jngh1wbGFubmVkZ2l2aW5nLnJtaGNiYXlh cmVhLm9yZ4IpcGxhbm5lZGdpdmluZy5zY290dGlzaHJpdGVmb3JjaGlsZHJlbi5v cmeCFnBsYW5uZWRnaXZpbmcuc2xwbC5vcmeCFnBsYW5uZWRnaXZpbmcuc2x1aC5v cmeCHHBsYW5uZWRnaXZpbmcuc21pbGV0cmFpbi5vcmeCI3BsYW5uZWRnaXZpbmcu c3RlcHVwZm9yc3R1ZGVudHMub3JnghVwbGFubmVkZ2l2aW5nLnZjcy5uZXSCFnBs YW5uZWRnaXZpbmcud2FtdS5vcmeCFXBsYW5uZWRnaXZpbmcud2J1LmVkdYIhcGxh bm5lZGdpdmluZy53b21lbmFuZGluZmFudHMub3JnghlwbGFubmVkZ2l2aW5nLnlj dG9yYWgub3Jngg1zZWNjdHJ1c3Qub3JnghlzZWN1cmVkbnMyLnBsYW5teWdpZnQu b3JnghZ0aGVraW5nc2ZvdW5kYXRpb24uY29tghR1b2ZscGxhbm5lZGdpZnRzLm9y Z4IYd3d3LmdldGluY29tZWZvcmxpZmUub3JngiB3d3cuaW5kaWFueW91dGhjaXJj bGVzb2NpZXR5Lm9yZ4IVd3d3Lmstc3RhdGVsZWdhY3kub3Jnghl3d3cua29tZW5n aWZ0cGxhbm5pbmcub3Jnghp3d3cubWFyeWJpcmRmb3VuZGF0aW9uLm9yZ4IXd3d3 Lm11bHRpY2FyZWxlZ2FjeS5vcmeCGHd3dy5teXJlZHdvb2RzbGVnYWN5Lm9yZ4IN d3d3Lm5jZ3BjLm9yZ4IZd3d3Lm91cmFtZXJpY2FubGVnYWN5Lm9yZ4IRd3d3LnNl Y2N0cnVzdC5vcmeCGnd3dy50aGVraW5nc2ZvdW5kYXRpb24uY29tghh3d3cudW9m bHBsYW5uZWRnaWZ0cy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAA3wQmJ8boaO AfWgx5ITuUo5gHqpmI6T3U7uI/QRrFw0qynCZJ/LOqp6TrcF1B1zSnlcSnbtDQf3 IkIKvsmeRwerE67ffqSrN/BzPHOQewcaKFMiyOO71+D/t1lKUjqzSYtQol/Laz8F YkDAubREphhS1/051z4/ixtfyZ0fZyORY8e26j2NSTe0iZAMEnRLtwp4wlp7PowS UYoNDczwMQt8BaZZu9xUzZP6fe69rewbT3CWe5DdjXseXXlUmyJVA75Jtxgf1p2R wNcaI4Du7ccXJFXGSmAM4nyDVR52av1KghuF2ZCHsPBLotPhdoYUoLskReTxAu6j NZDph0XopAw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRZEwRYxgmLXo7igB01D ZgzxkYyVGgGM7f1yXaTQdZEWyxvq3pCsLgxB/uNmIqjwUkqhuJkV6f6go/tb5CLO l8MENBJ6feZpJqfItXIew/4yOU47FAaS94eIi/FD7Zz60OsbhlDTpobWpAd5asky kq911XQ87U85j+5iK9rQKM272uVeFaWRocUAkou0IQeo4zrlGRzr8jm/OsB2HWRh iPa/O0BPcZPqLccsK9mKzi9/Fr59onc6PQ0n0H6MaGQ1TBzhydPQWy11j9fwYi8V g+r3KHrbO8i5vTHodyMN0vF2XhLUGQE0HqqYCu/xsP9FAOO1gV8Wk7p1HECASZ+v fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369723587571555684832712790916910598778248 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-12 20:09:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 20:09:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns2.planmygift.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16800675602247630342398296022830625475864387822327553003814039870372315714925685602125368851226763843389245852772351507601631648160203430376979476246001102718488722850371663721495581948642318340313580497493389254524344156181988958744600681752336165190775579198233696594973463304488333497632075154116131359374655755576454578843410662811477863038245877517180503288137196651301052495761694095973504676978473393935132512044362593134398365303264899505365476061826641729585125595950892129864732356618361757370580982888506106632811296556124762489813753053694343944000632948489283869429219497767284363397009899617530815688573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5faa7354e9745e449d1cac527aad59502bbeaccd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2440 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1899legacy.appstate.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatizoo.myestategift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endowmentfund.klrn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.gonzaga.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincomeforlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chq.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.f4mmc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.gsu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.miamioh.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nufoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.quincy.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.temple.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.usfca.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianyouthcirclesociety.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-statelegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khpfoundation.championscirclesociety.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komengiftplanning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.savingplaces.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wallawalla.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.easterseals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyofpeace.afsc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.acs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marybirdfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicarelegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.monmouth.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utexas.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.cgu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ucollege.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredwoodslegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgpc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktrustlegacy.pikes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericanlegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.stmarytx.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.kvc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.pnwu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.witc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adelphi.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.advance.einstein.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aesnet.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alma.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arthritis.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlanticare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aurora.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.balletaz.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.biglife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bravovail.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.butler.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calstatela.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.campbellsville.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.capitalhealth.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrenswi.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chw.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioceseofprovidence.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dunnschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.landconserve.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mercyone.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northeastern.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohsufoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rmhcbayarea.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishriteforchildren.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slpl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sluh.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.smiletrain.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stepupforstudents.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vcs.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wamu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wbu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womenandinfants.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.yctorah.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secctrust.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns2.planmygift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsfoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoflplannedgifts.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getincomeforlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianyouthcirclesociety.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-statelegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komengiftplanning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marybirdfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multicarelegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myredwoodslegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgpc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouramericanlegacy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secctrust.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekingsfoundation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflplannedgifts.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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