securedns3.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:26:86:d0:1f:5c:04:6b:94:14:9d:38:5d:f2:e1:81:ed:ff was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns3.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:86:d0:1f:5c:04:6b:94:14:9d:38:5d:f2:e1:81:ed:ff
Serial Number (int): 274446784923503212181502367680228728368639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:fc:27:25:9c:61:16:be:08:2c:a3:f2:7b:f1:bb:2d:d4:65:1c:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:5a:8b:07:b6:6f:f0:c6:1c:c3:c3:25:2d:07:fb:b5:bf:7e:43:21
Fingerprint (sha256): 48:a7:18:97:fa:b3:39:c4:3d:76:e3:ef:51:dc:f2:47:33:03:8e:84:0e:11:a7:92:d9:dd:e6:08:35:97:58:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns3.planmygift.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns3.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftplanning.du.edu
giftplanning.msu.edu
giftplanning.radyfoundation.org
giftplanning.uwm.edu
giftplanning.villanova.edu
giftplanning.wsu.edu
legacy.crisiscenter.com
legacy.lmu.edu
legacygift.ascefoundation.org
myplannedgift.ridgeviewmedical.org
pg.unthsc.edu
planmygift.morris.umn.edu
planmylegacy.uwf.edu
plannedgiving.bannerhealthfoundation.org
plannedgiving.brrh.com
plannedgiving.caldwell.edu
plannedgiving.caramoor.org
plannedgiving.centre.edu
plannedgiving.clf.org
plannedgiving.cristoreybalt.org
plannedgiving.culinary.edu
plannedgiving.cvtc.edu
plannedgiving.dar.org
plannedgiving.davidson.edu
plannedgiving.edwardfoundation.org
plannedgiving.fasterfarther.gmu.edu
plannedgiving.feedingamerica.org
plannedgiving.fenwickfalcons.org
plannedgiving.fhu.edu
plannedgiving.fortlewis.edu
plannedgiving.fvtc.edu
plannedgiving.geron.org
plannedgiving.hheonline.org
plannedgiving.hsutx.edu
plannedgiving.idyllwildarts.org
plannedgiving.innovia.org
plannedgiving.jbu.edu
plannedgiving.kentri.org
plannedgiving.kiddo.org
plannedgiving.kzoo.edu
plannedgiving.lagrangesymphony.org
plannedgiving.latinschool.org
plannedgiving.lwv.org
plannedgiving.macomb.edu
plannedgiving.mannafoodbank.org
plannedgiving.maryvale.org
plannedgiving.mc.edu
plannedgiving.mcgeheeschool.com
plannedgiving.mcm.edu
plannedgiving.mines.edu
plannedgiving.morehouse.edu
plannedgiving.msffoundation.org
plannedgiving.newmanschool.org
plannedgiving.northcross.org
plannedgiving.northmemorial.com
plannedgiving.nycballet.com
plannedgiving.odu.edu
plannedgiving.ollusa.edu
plannedgiving.ozarks.edu
plannedgiving.rosemont.edu
plannedgiving.rpbusa.org
plannedgiving.salk.edu
plannedgiving.sbschool.org
plannedgiving.scottishritehospital.org
plannedgiving.semesteratsea.org
plannedgiving.sfhscollegeprep.org
plannedgiving.sinclair.edu
plannedgiving.spa.edu
plannedgiving.stac.edu
plannedgiving.stchristophers.com
plannedgiving.sths.org
plannedgiving.stjudemedicalcenter.org
plannedgiving.stmarysdominican.org
plannedgiving.stolaf.edu
plannedgiving.stpiusx.org
plannedgiving.tcu.edu
plannedgiving.thearcsf.org
plannedgiving.thefutureofhealthcare.org
plannedgiving.thomasu.edu
plannedgiving.txaglandtrust.org
plannedgiving.uconn.edu
plannedgiving.ucsb.edu
plannedgiving.ulpgh.org
plannedgiving.umbwmc.org
plannedgiving.unt.edu
plannedgiving.uua.org
plannedgiving.vnacarenewengland.org
plannedgiving.vwu.edu
plannedgiving.walsh.edu
plannedgiving.waterforpeople.org
plannedgiving.williamson.edu
plannedgiving.wlc.edu
plannedgiving.wlrn.org
plannedgiving.womans.org
plannedgiving.wqed.org
plannedgiving.ywca.org
securedns3.planmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG

Certificate

The complete raw certificate details for securedns3.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPpzCCDo+gAwIBAgISAyaG0B9cBGuUFJ04XfLhge3/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA5MDIxMzEwMTBaFw0yMjEyMDExMzEwMDlaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczMucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuYmvaiTTnxOlTifX+GrvSJpIcSi24PpW6mHsrmSbOF6MxNB7R
4A/vBfqp0NPHAJceuMH2KBzxlxXGA3a52HlAMpEtDPzFHTONM8Tyds18QmAC+Hvn
9Vwa/+gHUtI3lB/L8/bBqpC1GoYCLwyoRbXPux8FzRgb+UQ/EojEAhPQhxm8bF/H
yEsoOLwkkGZ8ZchaEqYT+k2zb3nbASha/TQbKn6U9MEd2hwhMmNwI+eTqklPa6mx
xl2H7FXRUyfhqOy0s6+cYFIeCDYl+e2yV8lDRYxjv+ha7751CBEHxXrORn5dGRFc
rrwCxPWioGSvh4+KcUBouFCceNnZcJ1EeDQpAgMBAAGjggzDMIIMvzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFEf8JyWcYRa+CCyj8nvxuy3UZRxeMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIKkQYDVR0RBIIKiDCCCoSCE2dpZnRwbGFubmluZy5kdS5l
ZHWCFGdpZnRwbGFubmluZy5tc3UuZWR1gh9naWZ0cGxhbm5pbmcucmFkeWZvdW5k
YXRpb24ub3JnghRnaWZ0cGxhbm5pbmcudXdtLmVkdYIaZ2lmdHBsYW5uaW5nLnZp
bGxhbm92YS5lZHWCFGdpZnRwbGFubmluZy53c3UuZWR1ghdsZWdhY3kuY3Jpc2lz
Y2VudGVyLmNvbYIObGVnYWN5LmxtdS5lZHWCHWxlZ2FjeWdpZnQuYXNjZWZvdW5k
YXRpb24ub3JngiJteXBsYW5uZWRnaWZ0LnJpZGdldmlld21lZGljYWwub3Jngg1w
Zy51bnRoc2MuZWR1ghlwbGFubXlnaWZ0Lm1vcnJpcy51bW4uZWR1ghRwbGFubXls
ZWdhY3kudXdmLmVkdYIocGxhbm5lZGdpdmluZy5iYW5uZXJoZWFsdGhmb3VuZGF0
aW9uLm9yZ4IWcGxhbm5lZGdpdmluZy5icnJoLmNvbYIacGxhbm5lZGdpdmluZy5j
YWxkd2VsbC5lZHWCGnBsYW5uZWRnaXZpbmcuY2FyYW1vb3Iub3JnghhwbGFubmVk
Z2l2aW5nLmNlbnRyZS5lZHWCFXBsYW5uZWRnaXZpbmcuY2xmLm9yZ4IfcGxhbm5l
ZGdpdmluZy5jcmlzdG9yZXliYWx0Lm9yZ4IacGxhbm5lZGdpdmluZy5jdWxpbmFy
eS5lZHWCFnBsYW5uZWRnaXZpbmcuY3Z0Yy5lZHWCFXBsYW5uZWRnaXZpbmcuZGFy
Lm9yZ4IacGxhbm5lZGdpdmluZy5kYXZpZHNvbi5lZHWCInBsYW5uZWRnaXZpbmcu
ZWR3YXJkZm91bmRhdGlvbi5vcmeCI3BsYW5uZWRnaXZpbmcuZmFzdGVyZmFydGhl
ci5nbXUuZWR1giBwbGFubmVkZ2l2aW5nLmZlZWRpbmdhbWVyaWNhLm9yZ4IgcGxh
bm5lZGdpdmluZy5mZW53aWNrZmFsY29ucy5vcmeCFXBsYW5uZWRnaXZpbmcuZmh1
LmVkdYIbcGxhbm5lZGdpdmluZy5mb3J0bGV3aXMuZWR1ghZwbGFubmVkZ2l2aW5n
LmZ2dGMuZWR1ghdwbGFubmVkZ2l2aW5nLmdlcm9uLm9yZ4IbcGxhbm5lZGdpdmlu
Zy5oaGVvbmxpbmUub3JnghdwbGFubmVkZ2l2aW5nLmhzdXR4LmVkdYIfcGxhbm5l
ZGdpdmluZy5pZHlsbHdpbGRhcnRzLm9yZ4IZcGxhbm5lZGdpdmluZy5pbm5vdmlh
Lm9yZ4IVcGxhbm5lZGdpdmluZy5qYnUuZWR1ghhwbGFubmVkZ2l2aW5nLmtlbnRy
aS5vcmeCF3BsYW5uZWRnaXZpbmcua2lkZG8ub3JnghZwbGFubmVkZ2l2aW5nLmt6
b28uZWR1giJwbGFubmVkZ2l2aW5nLmxhZ3Jhbmdlc3ltcGhvbnkub3Jngh1wbGFu
bmVkZ2l2aW5nLmxhdGluc2Nob29sLm9yZ4IVcGxhbm5lZGdpdmluZy5sd3Yub3Jn
ghhwbGFubmVkZ2l2aW5nLm1hY29tYi5lZHWCH3BsYW5uZWRnaXZpbmcubWFubmFm
b29kYmFuay5vcmeCGnBsYW5uZWRnaXZpbmcubWFyeXZhbGUub3JnghRwbGFubmVk
Z2l2aW5nLm1jLmVkdYIfcGxhbm5lZGdpdmluZy5tY2dlaGVlc2Nob29sLmNvbYIV
cGxhbm5lZGdpdmluZy5tY20uZWR1ghdwbGFubmVkZ2l2aW5nLm1pbmVzLmVkdYIb
cGxhbm5lZGdpdmluZy5tb3JlaG91c2UuZWR1gh9wbGFubmVkZ2l2aW5nLm1zZmZv
dW5kYXRpb24ub3Jngh5wbGFubmVkZ2l2aW5nLm5ld21hbnNjaG9vbC5vcmeCHHBs
YW5uZWRnaXZpbmcubm9ydGhjcm9zcy5vcmeCH3BsYW5uZWRnaXZpbmcubm9ydGht
ZW1vcmlhbC5jb22CG3BsYW5uZWRnaXZpbmcubnljYmFsbGV0LmNvbYIVcGxhbm5l
ZGdpdmluZy5vZHUuZWR1ghhwbGFubmVkZ2l2aW5nLm9sbHVzYS5lZHWCGHBsYW5u
ZWRnaXZpbmcub3phcmtzLmVkdYIacGxhbm5lZGdpdmluZy5yb3NlbW9udC5lZHWC
GHBsYW5uZWRnaXZpbmcucnBidXNhLm9yZ4IWcGxhbm5lZGdpdmluZy5zYWxrLmVk
dYIacGxhbm5lZGdpdmluZy5zYnNjaG9vbC5vcmeCJnBsYW5uZWRnaXZpbmcuc2Nv
dHRpc2hyaXRlaG9zcGl0YWwub3Jngh9wbGFubmVkZ2l2aW5nLnNlbWVzdGVyYXRz
ZWEub3JngiFwbGFubmVkZ2l2aW5nLnNmaHNjb2xsZWdlcHJlcC5vcmeCGnBsYW5u
ZWRnaXZpbmcuc2luY2xhaXIuZWR1ghVwbGFubmVkZ2l2aW5nLnNwYS5lZHWCFnBs
YW5uZWRnaXZpbmcuc3RhYy5lZHWCIHBsYW5uZWRnaXZpbmcuc3RjaHJpc3RvcGhl
cnMuY29tghZwbGFubmVkZ2l2aW5nLnN0aHMub3JngiVwbGFubmVkZ2l2aW5nLnN0
anVkZW1lZGljYWxjZW50ZXIub3JngiJwbGFubmVkZ2l2aW5nLnN0bWFyeXNkb21p
bmljYW4ub3JnghhwbGFubmVkZ2l2aW5nLnN0b2xhZi5lZHWCGXBsYW5uZWRnaXZp
bmcuc3RwaXVzeC5vcmeCFXBsYW5uZWRnaXZpbmcudGN1LmVkdYIacGxhbm5lZGdp
dmluZy50aGVhcmNzZi5vcmeCJ3BsYW5uZWRnaXZpbmcudGhlZnV0dXJlb2ZoZWFs
dGhjYXJlLm9yZ4IZcGxhbm5lZGdpdmluZy50aG9tYXN1LmVkdYIfcGxhbm5lZGdp
dmluZy50eGFnbGFuZHRydXN0Lm9yZ4IXcGxhbm5lZGdpdmluZy51Y29ubi5lZHWC
FnBsYW5uZWRnaXZpbmcudWNzYi5lZHWCF3BsYW5uZWRnaXZpbmcudWxwZ2gub3Jn
ghhwbGFubmVkZ2l2aW5nLnVtYndtYy5vcmeCFXBsYW5uZWRnaXZpbmcudW50LmVk
dYIVcGxhbm5lZGdpdmluZy51dWEub3JngiNwbGFubmVkZ2l2aW5nLnZuYWNhcmVu
ZXdlbmdsYW5kLm9yZ4IVcGxhbm5lZGdpdmluZy52d3UuZWR1ghdwbGFubmVkZ2l2
aW5nLndhbHNoLmVkdYIgcGxhbm5lZGdpdmluZy53YXRlcmZvcnBlb3BsZS5vcmeC
HHBsYW5uZWRnaXZpbmcud2lsbGlhbXNvbi5lZHWCFXBsYW5uZWRnaXZpbmcud2xj
LmVkdYIWcGxhbm5lZGdpdmluZy53bHJuLm9yZ4IYcGxhbm5lZGdpdmluZy53b21h
bnMub3JnghZwbGFubmVkZ2l2aW5nLndxZWQub3JnghZwbGFubmVkZ2l2aW5nLnl3
Y2Eub3JnghlzZWN1cmVkbnMzLnBsYW5teWdpZnQub3JnMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAQcjKsd8i
RkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGC/omm2wAABAMARzBFAiBE+xH8
MXYjhsRBBNfQYmi6W6N9uEYuqOCxAUZWJ7RmHwIhANpkdl2blg/wVgVz8gFABEmv
0dS9J+ng4ArhSMoWUMWEAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+
bUcAAAGC/omm/wAABAMARzBFAiAydzNqFQEmAZRCDuv9T22dyP3xqZqZcHYl75Vf
5pSWLwIhANtnrxXBuSZL1SfOFzUHEwR82zW3uFdEXZrws2LxrrnKMA0GCSqGSIb3
DQEBCwUAA4IBAQBZZANhWCU3PfNChDs8KrkccSMGzYoPBqWamIZumKi4OASSNqM9
UeC77dFLLtw3Dtsq3zxUmyUMCrdhpihhLndY9IkBC2jT0Kmjc0t+5cxNCWtGuxHh
8esMS09m0KLtmIKcm2WqcKLJ8zeUmj+nf6K6hGdFT6SQ40oaEsql0pgCp8EeaE0D
N77pMgx/WJzS6+93MKw3Gk8XxJQP4Xtzy3ch5/7r5fEqXvZ/Zz37DjQOtVr2SgBn
KI0GlSJ28HYxN7Tiul2N/0kw9kEM+nPT88N4Q0Gs59iuLRtLNgxoB7DbW+UIl2lr
5D+XcfIYoHYO4ljRVdLD06tTyO9FIXs/S5Og
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmJr2ok058TpU4n1/hq7
0iaSHEotuD6Vuph7K5kmzhejMTQe0eAP7wX6qdDTxwCXHrjB9igc8ZcVxgN2udh5
QDKRLQz8xR0zjTPE8nbNfEJgAvh75/VcGv/oB1LSN5Qfy/P2waqQtRqGAi8MqEW1
z7sfBc0YG/lEPxKIxAIT0IcZvGxfx8hLKDi8JJBmfGXIWhKmE/pNs2952wEoWv00
Gyp+lPTBHdocITJjcCPnk6pJT2upscZdh+xV0VMn4ajstLOvnGBSHgg2JfntslfJ
Q0WMY7/oWu++dQgRB8V6zkZ+XRkRXK68AsT1oqBkr4ePinFAaLhQnHjZ2XCdRHg0
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274446784923503212181502367680228728368639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-02 13:10:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 13:10:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns3.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22013998417636068598625925956662488023726330124332695761203245143720819928403315858230703180591053453817132671755875264820102285830918621133076113191990081665341176778651893497774071458542262312662451425789159216173020901105107557076052178961126823115476614599870482493243640891558489721704280470972769318630898677584996784450560816101940570919286202641628701685696689326977378011708493535901630659520236885339198084585500052314559753469237639431524887024218142081151892288731124604495114787610525458687589447849297052107778957526573106164037150887457251901284629285190129500254890173026413229332206384332571728688169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47fc27259c6116be082ca3f27bf1bb2dd4651c5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2696 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.radyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.villanova.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.crisiscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.ascefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ridgeviewmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.morris.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.uwf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bannerhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caldwell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caramoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreybalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.culinary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edwardfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fasterfarther.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fortlewis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.geron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hheonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsutx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idyllwildarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.innovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.jbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kentri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kiddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kzoo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lagrangesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.latinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.macomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mannafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maryvale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcgeheeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.morehouse.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msffoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.newmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nycballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ollusa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ozarks.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rosemont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rpbusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.salk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sbschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishritehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.semesteratsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sfhscollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sinclair.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stchristophers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjudemedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stmarysdominican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stolaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stpiusx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thearcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thefutureofhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thomasu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.txaglandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ulpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.unt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnacarenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walsh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.williamson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ywca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns3.planmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182fe89a6db0000040300473045022044fb11fc31762386c44104d7d06268ba5ba37db8462ea8e0b101465627b4661f022100da64765d9b960ff0560573f201400449afd1d4bd27e9e0e00ae148ca1650c58400760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182fe89a6ff000004030047304502203277336a1501260194420eebfd4f6d9dc8fdf1a99a99707625ef955fe694962f022100db67af15c1b9264bd527ce17350713047cdb35b7b857445d9af0b362f1aeb9ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00596403615825373df342843b3c2ab91c712306cd8a0f06a59a98866e98a8b838049236a33d51e0bbedd14b2edc370edb2adf3c549b250c0ab761a628612e7758f489010b68d3d0a9a3734b7ee5cc4d096b46bb11e1f1eb0c4b4f66d0a2ed98829c9b65aa70a2c9f337949a3fa77fa2ba8467454fa490e34a1a12caa5d29802a7c11e684d0337bee9320c7f589cd2ebef7730ac371a4f17c4940fe17b73cb7721e7feebe5f12a5ef67f673dfb0e340eb55af64a0067288d06952276f0763137b4e2ba5d8dff4930f6410cfa73d3f3c3784341ace7d8ae2d1b4b360c6807b0db5be50897696be43f9771f218a0760ee258d155d2c3d3ab53c8ef45217b3f4b93a0