securedns2.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:79:aa:21:b4:1b:fd:08:f9:c3:c4:32:48:0d:8c:98:6a:10 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns2.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:aa:21:b4:1b:fd:08:f9:c3:c4:32:48:0d:8c:98:6a:10
Serial Number (int): 389849453882605507616826991631271131114000
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:85:7b:10:f2:11:5a:a1:ef:b4:3a:fa:7c:f4:0d:83:b3:d7:46:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:1f:a1:f5:08:63:17:14:4d:7b:6b:52:6d:f2:17:f2:03:a5:d9:bd
Fingerprint (sha256): 44:d0:ec:f0:cb:9c:0b:50:15:d5:83:b2:0c:2a:a0:ca:d2:b2:22:c3:e2:98:01:99:aa:df:05:d1:6a:d0:5d:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns2.planmygift.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns2.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1899legacy.appstate.edu
cincinnatizoo.myestategift.org
endowmentfund.klrn.org
forever.gonzaga.org
getincomeforlife.org
giftplanning.chq.org
giftplanning.f4mmc.org
giftplanning.gsu.edu
giftplanning.hw.com
giftplanning.miamioh.edu
giftplanning.nufoundation.org
giftplanning.quincy.edu
giftplanning.temple.edu
giftplanning.uh.edu
giftplanning.usfca.edu
indianyouthcirclesociety.org
k-statelegacy.org
khpfoundation.championscirclesociety.org
komengiftplanning.org
legacy.houstonpublicmedia.org
legacy.savingplaces.org
legacy.wallawalla.edu
legacygiving.easterseals.com
legacyofpeace.afsc.org
legacyplanning.acs.org
marybirdfoundation.org
multicarelegacy.org
mylegacy.monmouth.edu
mylegacy.utexas.edu
myplannedgift.cgu.edu
myplannedgift.ucollege.edu
myredwoodslegacy.org
ncgpc.org
oaktrustlegacy.pikes.org
ouramericanlegacy.org
plan.stmarytx.edu
planmygift.kvc.org
planmylegacy.pnwu.edu
planmylegacy.witc.edu
plannedgifts.providence.org
plannedgiving.adelphi.edu
plannedgiving.advance.einstein.edu
plannedgiving.aesnet.org
plannedgiving.alma.edu
plannedgiving.arthritis.org
plannedgiving.atlanticare.org
plannedgiving.aurora.edu
plannedgiving.balletaz.org
plannedgiving.biglife.org
plannedgiving.bravovail.org
plannedgiving.butler.org
plannedgiving.calstatela.edu
plannedgiving.campbellsville.edu
plannedgiving.capitalhealth.org
plannedgiving.cfswia.org
plannedgiving.childrenswi.org
plannedgiving.chw.org
plannedgiving.dioceseofprovidence.org
plannedgiving.lafoodbank.org
plannedgiving.landconserve.org
plannedgiving.mercyone.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.northeastern.edu
plannedgiving.ohsufoundation.org
plannedgiving.rmhcbayarea.org
plannedgiving.scottishriteforchildren.org
plannedgiving.slpl.org
plannedgiving.sluh.org
plannedgiving.smiletrain.org
plannedgiving.stepupforstudents.org
plannedgiving.vcs.net
plannedgiving.wamu.org
plannedgiving.womenandinfants.org
plannedgiving.yctorah.org
secctrust.org
securedns2.planmygift.org
thekingsfoundation.com
www.getincomeforlife.org
www.indianyouthcirclesociety.org
www.k-statelegacy.org
www.komengiftplanning.org
www.marybirdfoundation.org
www.multicarelegacy.org
www.myredwoodslegacy.org
www.ncgpc.org
www.ouramericanlegacy.org
www.secctrust.org
www.thekingsfoundation.com
www.uoflplannedgifts.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns2.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOXDCCDUSgAwIBAgISBHmqIbQb/Qj5w8QySA2MmGoQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA0MjgxNTI5NDlaFw0yMjA3MjcxNTI5NDhaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczIucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCJ8Ir0uPW0/Ozl7/7jQpcjuwehCP9Esib8r4wvnhWDwqqddgAc
y1tO2CrIHtAl35jPYZFPDCsfLmq0dm/yU/Vk5eFFw7rSkK5z/1pGM9G3xXrS9QUn
NsVGmqMtFA3c0SAOUIlucJHOzk4MIEhgFgx28CjVv5Oo1LzV3jy68Dp9WNgRhmFN
UVaq6AleC+2L9/Wczm+Z0XFukVEtEQrdVfrNSHHGP2CpTe1QnIvZf2Em9ZlKuZnt
CUe5QS6CDqAfjUtCAii/+GTO/ntDxmysaPm3usTTLnemY6OriKv00YHgBSfH4xFQ
FGzQoGFV2Kvq0BI76gBiz7X8pwCerKEHCEopAgMBAAGjggt4MIILdDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCSFexDyEVqh77Q6+nz0DYOz10blMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIJRwYDVR0RBIIJPjCCCTqCFzE4OTlsZWdhY3kuYXBwc3Rh
dGUuZWR1gh5jaW5jaW5uYXRpem9vLm15ZXN0YXRlZ2lmdC5vcmeCFmVuZG93bWVu
dGZ1bmQua2xybi5vcmeCE2ZvcmV2ZXIuZ29uemFnYS5vcmeCFGdldGluY29tZWZv
cmxpZmUub3JnghRnaWZ0cGxhbm5pbmcuY2hxLm9yZ4IWZ2lmdHBsYW5uaW5nLmY0
bW1jLm9yZ4IUZ2lmdHBsYW5uaW5nLmdzdS5lZHWCE2dpZnRwbGFubmluZy5ody5j
b22CGGdpZnRwbGFubmluZy5taWFtaW9oLmVkdYIdZ2lmdHBsYW5uaW5nLm51Zm91
bmRhdGlvbi5vcmeCF2dpZnRwbGFubmluZy5xdWluY3kuZWR1ghdnaWZ0cGxhbm5p
bmcudGVtcGxlLmVkdYITZ2lmdHBsYW5uaW5nLnVoLmVkdYIWZ2lmdHBsYW5uaW5n
LnVzZmNhLmVkdYIcaW5kaWFueW91dGhjaXJjbGVzb2NpZXR5Lm9yZ4IRay1zdGF0
ZWxlZ2FjeS5vcmeCKGtocGZvdW5kYXRpb24uY2hhbXBpb25zY2lyY2xlc29jaWV0
eS5vcmeCFWtvbWVuZ2lmdHBsYW5uaW5nLm9yZ4IdbGVnYWN5LmhvdXN0b25wdWJs
aWNtZWRpYS5vcmeCF2xlZ2FjeS5zYXZpbmdwbGFjZXMub3JnghVsZWdhY3kud2Fs
bGF3YWxsYS5lZHWCHGxlZ2FjeWdpdmluZy5lYXN0ZXJzZWFscy5jb22CFmxlZ2Fj
eW9mcGVhY2UuYWZzYy5vcmeCFmxlZ2FjeXBsYW5uaW5nLmFjcy5vcmeCFm1hcnli
aXJkZm91bmRhdGlvbi5vcmeCE211bHRpY2FyZWxlZ2FjeS5vcmeCFW15bGVnYWN5
Lm1vbm1vdXRoLmVkdYITbXlsZWdhY3kudXRleGFzLmVkdYIVbXlwbGFubmVkZ2lm
dC5jZ3UuZWR1ghpteXBsYW5uZWRnaWZ0LnVjb2xsZWdlLmVkdYIUbXlyZWR3b29k
c2xlZ2FjeS5vcmeCCW5jZ3BjLm9yZ4IYb2FrdHJ1c3RsZWdhY3kucGlrZXMub3Jn
ghVvdXJhbWVyaWNhbmxlZ2FjeS5vcmeCEXBsYW4uc3RtYXJ5dHguZWR1ghJwbGFu
bXlnaWZ0Lmt2Yy5vcmeCFXBsYW5teWxlZ2FjeS5wbnd1LmVkdYIVcGxhbm15bGVn
YWN5LndpdGMuZWR1ghtwbGFubmVkZ2lmdHMucHJvdmlkZW5jZS5vcmeCGXBsYW5u
ZWRnaXZpbmcuYWRlbHBoaS5lZHWCInBsYW5uZWRnaXZpbmcuYWR2YW5jZS5laW5z
dGVpbi5lZHWCGHBsYW5uZWRnaXZpbmcuYWVzbmV0Lm9yZ4IWcGxhbm5lZGdpdmlu
Zy5hbG1hLmVkdYIbcGxhbm5lZGdpdmluZy5hcnRocml0aXMub3Jngh1wbGFubmVk
Z2l2aW5nLmF0bGFudGljYXJlLm9yZ4IYcGxhbm5lZGdpdmluZy5hdXJvcmEuZWR1
ghpwbGFubmVkZ2l2aW5nLmJhbGxldGF6Lm9yZ4IZcGxhbm5lZGdpdmluZy5iaWds
aWZlLm9yZ4IbcGxhbm5lZGdpdmluZy5icmF2b3ZhaWwub3JnghhwbGFubmVkZ2l2
aW5nLmJ1dGxlci5vcmeCHHBsYW5uZWRnaXZpbmcuY2Fsc3RhdGVsYS5lZHWCIHBs
YW5uZWRnaXZpbmcuY2FtcGJlbGxzdmlsbGUuZWR1gh9wbGFubmVkZ2l2aW5nLmNh
cGl0YWxoZWFsdGgub3JnghhwbGFubmVkZ2l2aW5nLmNmc3dpYS5vcmeCHXBsYW5u
ZWRnaXZpbmcuY2hpbGRyZW5zd2kub3JnghVwbGFubmVkZ2l2aW5nLmNody5vcmeC
JXBsYW5uZWRnaXZpbmcuZGlvY2VzZW9mcHJvdmlkZW5jZS5vcmeCHHBsYW5uZWRn
aXZpbmcubGFmb29kYmFuay5vcmeCHnBsYW5uZWRnaXZpbmcubGFuZGNvbnNlcnZl
Lm9yZ4IacGxhbm5lZGdpdmluZy5tZXJjeW9uZS5vcmeCJ3BsYW5uZWRnaXZpbmcu
bXBucmVzZWFyY2hmb3VuZGF0aW9uLm9yZ4IecGxhbm5lZGdpdmluZy5ub3J0aGVh
c3Rlcm4uZWR1giBwbGFubmVkZ2l2aW5nLm9oc3Vmb3VuZGF0aW9uLm9yZ4IdcGxh
bm5lZGdpdmluZy5ybWhjYmF5YXJlYS5vcmeCKXBsYW5uZWRnaXZpbmcuc2NvdHRp
c2hyaXRlZm9yY2hpbGRyZW4ub3JnghZwbGFubmVkZ2l2aW5nLnNscGwub3JnghZw
bGFubmVkZ2l2aW5nLnNsdWgub3JnghxwbGFubmVkZ2l2aW5nLnNtaWxldHJhaW4u
b3JngiNwbGFubmVkZ2l2aW5nLnN0ZXB1cGZvcnN0dWRlbnRzLm9yZ4IVcGxhbm5l
ZGdpdmluZy52Y3MubmV0ghZwbGFubmVkZ2l2aW5nLndhbXUub3JngiFwbGFubmVk
Z2l2aW5nLndvbWVuYW5kaW5mYW50cy5vcmeCGXBsYW5uZWRnaXZpbmcueWN0b3Jh
aC5vcmeCDXNlY2N0cnVzdC5vcmeCGXNlY3VyZWRuczIucGxhbm15Z2lmdC5vcmeC
FnRoZWtpbmdzZm91bmRhdGlvbi5jb22CGHd3dy5nZXRpbmNvbWVmb3JsaWZlLm9y
Z4Igd3d3LmluZGlhbnlvdXRoY2lyY2xlc29jaWV0eS5vcmeCFXd3dy5rLXN0YXRl
bGVnYWN5Lm9yZ4IZd3d3LmtvbWVuZ2lmdHBsYW5uaW5nLm9yZ4Iad3d3Lm1hcnli
aXJkZm91bmRhdGlvbi5vcmeCF3d3dy5tdWx0aWNhcmVsZWdhY3kub3Jnghh3d3cu
bXlyZWR3b29kc2xlZ2FjeS5vcmeCDXd3dy5uY2dwYy5vcmeCGXd3dy5vdXJhbWVy
aWNhbmxlZ2FjeS5vcmeCEXd3dy5zZWNjdHJ1c3Qub3Jnghp3d3cudGhla2luZ3Nm
b3VuZGF0aW9uLmNvbYIYd3d3LnVvZmxwbGFubmVkZ2lmdHMub3JnMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA
36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAGAcQHeJgAABAMARjBE
AiAXY9zA9I5Ea6BAFicTPMkHqmQd1MNKvxVlyUhaiZ7IQAIgPcHdoNmxqpMDPxPF
pATWB+XKplXnmq/yPbYMo25yd7EAdgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlN
XSZcJV3HhAAAAYBxAd4hAAAEAwBHMEUCIQD0PDfYN7tniLLNrCiIhDADKEPgiQym
MTpsu7vXgzf4QAIgbGThC26cKkOGwy+U2bM37P7FsVktDq0Zq/6G+g7y3icwDQYJ
KoZIhvcNAQELBQADggEBAGC8ZNhuWxx1yJVEl4TKjfNWx/qibV73XA0pgD6yMFqP
18C9Cv/KE7+lOkzc8aurxXlsIboBEqOucMif86vnrl+lKPC/3xouseVusN9ZL8qz
gFPZeoG0bZTNbModVyLnesQO6b6Hced1V3xTdLuzy4fTlwJzTo2QqOh+8R6z0ywC
e/yOfcf6jTuKfVYcB3+KqiGP6+PBai6VmfBvGgHfHoURWwzx+EvGDs2oHGuBK2uv
0cm0EAGyBZXr7s2dnEdOeXh4uWQp3QGmC8vF3JRa6/mb2P8OMBFBUdrrbAZYAsia
8bgsmHA5/HBO8jmFcsQVUIXYK3/LTXdIdpr3H0Yvvbc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifCK9Lj1tPzs5e/+40KX
I7sHoQj/RLIm/K+ML54Vg8KqnXYAHMtbTtgqyB7QJd+Yz2GRTwwrHy5qtHZv8lP1
ZOXhRcO60pCuc/9aRjPRt8V60vUFJzbFRpqjLRQN3NEgDlCJbnCRzs5ODCBIYBYM
dvAo1b+TqNS81d48uvA6fVjYEYZhTVFWqugJXgvti/f1nM5vmdFxbpFRLREK3VX6
zUhxxj9gqU3tUJyL2X9hJvWZSrmZ7QlHuUEugg6gH41LQgIov/hkzv57Q8ZsrGj5
t7rE0y53pmOjq4ir9NGB4AUnx+MRUBRs0KBhVdir6tASO+oAYs+1/KcAnqyhBwhK
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389849453882605507616826991631271131114000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 15:29:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 15:29:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns2.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17413263854269129278882018634634700953533943217322778499372281146811167141772841704900347393247072419936367631288973556921350536158704584930376146929468238487495680372734633232675606219272906459006011418551821749714773657423933318629682483420113564696174905202502532062707391083353270045010800421126690552591132368235035666439378270427279840188361082791709410945162295449258087594067889390558818114377178945618562134040787383572689139577765612233359075163488379527764168539659001936093072325952535253459611818315463066548192309520462970115178219795808280958661162830290140558832693503324770092353611691434457835260457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24857b10f2115aa1efb43afa7cf40d83b3d746e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1899legacy.appstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatizoo.myestategift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endowmentfund.klrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.gonzaga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.f4mmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.gsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.miamioh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.quincy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.temple.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.usfca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khpfoundation.championscirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.houstonpublicmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.savingplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.wallawalla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.easterseals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyofpeace.afsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.acs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.monmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.cgu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ucollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaktrustlegacy.pikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.kvc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.pnwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.witc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adelphi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.advance.einstein.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aesnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arthritis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aurora.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.biglife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.butler.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calstatela.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.campbellsville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.capitalhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrenswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioceseofprovidence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.landconserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mercyone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northeastern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohsufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rmhcbayarea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishriteforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slpl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sluh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.smiletrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stepupforstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wamu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womenandinfants.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.yctorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns2.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getincomeforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianyouthcirclesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-statelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.komengiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marybirdfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multicarelegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myredwoodslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncgpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouramericanlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secctrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekingsfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uoflplannedgifts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001807101de26000004030046304402201763dcc0f48e446ba0401627133cc907aa641dd4c34abf1565c9485a899ec84002203dc1dda0d9b1aa93033f13c5a404d607e5caa655e79aaff23db60ca36e7277b10076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001807101de210000040300473045022100f43c37d837bb6788b2cdac28888430032843e0890ca6313a6cbbbbd78337f84002206c64e10b6e9c2a4386c32f94d9b337ecfec5b1592d0ead19abfe86fa0ef2de27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0060bc64d86e5b1c75c895449784ca8df356c7faa26d5ef75c0d29803eb2305a8fd7c0bd0affca13bfa53a4cdcf1ababc5796c21ba0112a3ae70c89ff3abe7ae5fa528f0bfdf1a2eb1e56eb0df592fcab38053d97a81b46d94cd6cca1d5722e77ac40ee9be8771e775577c5374bbb3cb87d39702734e8d90a8e87ef11eb3d32c027bfc8e7dc7fa8d3b8a7d561c077f8aaa218febe3c16a2e9599f06f1a01df1e85115b0cf1f84bc60ecda81c6b812b6bafd1c9b41001b20595ebeecd9d9c474e797878b96429dd01a60bcbc5dc945aebf99bd8ff0e30114151daeb6c065802c89af1b82c987039fc704ef2398572c4155085d82b7fcb4d7748769af71f462fbdb7