securedns3.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:74:1c:2e:1e:40:1f:c6:f0:52:d9:69:99:a1:78:f0:f6:d5 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns3.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:1c:2e:1e:40:1f:c6:f0:52:d9:69:99:a1:78:f0:f6:d5
Serial Number (int): 300847070201199796996111402812770121479893
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:3d:47:b3:a9:47:d1:ff:18:5c:fa:4a:1c:01:7c:e3:6b:20:d0:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:d6:b9:8c:e0:4b:07:e5:3f:2b:95:a9:57:68:a8:a9:6c:70:5e:34
Fingerprint (sha256): 54:b3:62:97:5d:ab:a1:46:56:50:9f:3f:ac:eb:7f:e9:27:8c:7b:ec:10:f4:de:8d:1c:db:a8:9f:ae:f5:62:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns3.planmygift.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns3.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftplanning.du.edu
giftplanning.radyfoundation.org
giftplanning.uwm.edu
giftplanning.villanova.edu
giftplanning.wsu.edu
legacy.crisiscenter.com
legacy.lmu.edu
legacygift.ascefoundation.org
myplannedgift.ridgeviewmedical.org
planmygift.morris.umn.edu
planmylegacy.uwf.edu
plannedgiving.bannerhealthfoundation.org
plannedgiving.binghamton.edu
plannedgiving.brrh.com
plannedgiving.caldwell.edu
plannedgiving.caramoor.org
plannedgiving.centre.edu
plannedgiving.clf.org
plannedgiving.cristoreybalt.org
plannedgiving.culinary.edu
plannedgiving.cvtc.edu
plannedgiving.dar.org
plannedgiving.davidson.edu
plannedgiving.edwardfoundation.org
plannedgiving.fasterfarther.gmu.edu
plannedgiving.fenwickfalcons.org
plannedgiving.fhu.edu
plannedgiving.fortlewis.edu
plannedgiving.fvtc.edu
plannedgiving.geron.org
plannedgiving.hheonline.org
plannedgiving.hsutx.edu
plannedgiving.idyllwildarts.org
plannedgiving.innovia.org
plannedgiving.jbu.edu
plannedgiving.kentri.org
plannedgiving.kiddo.org
plannedgiving.kzoo.edu
plannedgiving.lagrangesymphony.org
plannedgiving.latinschool.org
plannedgiving.lwv.org
plannedgiving.macomb.edu
plannedgiving.mannafoodbank.org
plannedgiving.maryvale.org
plannedgiving.mc.edu
plannedgiving.mcgeheeschool.com
plannedgiving.mcm.edu
plannedgiving.mines.edu
plannedgiving.morehouse.edu
plannedgiving.msffoundation.org
plannedgiving.newmanschool.org
plannedgiving.northcross.org
plannedgiving.northmemorial.com
plannedgiving.nycballet.com
plannedgiving.odu.edu
plannedgiving.ohiodominican.edu
plannedgiving.ollusa.edu
plannedgiving.ozarks.edu
plannedgiving.rosemont.edu
plannedgiving.rpbusa.org
plannedgiving.salk.edu
plannedgiving.sbschool.org
plannedgiving.scottishritehospital.org
plannedgiving.semesteratsea.org
plannedgiving.sfhscollegeprep.org
plannedgiving.sinclair.edu
plannedgiving.spa.edu
plannedgiving.stac.edu
plannedgiving.stcharlesprep.org
plannedgiving.stchristophers.com
plannedgiving.sths.org
plannedgiving.stjudemedicalcenter.org
plannedgiving.stlcop.edu
plannedgiving.stlcop.org
plannedgiving.stmarysdominican.org
plannedgiving.stolaf.edu
plannedgiving.stpiusx.org
plannedgiving.tcu.edu
plannedgiving.thearcsf.org
plannedgiving.thefutureofhealthcare.org
plannedgiving.thomasu.edu
plannedgiving.txaglandtrust.org
plannedgiving.uconn.edu
plannedgiving.ucsb.edu
plannedgiving.ulpgh.org
plannedgiving.unt.edu
plannedgiving.uua.org
plannedgiving.vnacarenewengland.org
plannedgiving.vwu.edu
plannedgiving.walsh.edu
plannedgiving.williamson.edu
plannedgiving.wlc.edu
plannedgiving.wlrn.org
plannedgiving.womans.org
plannedgiving.wqed.org
plannedgiving.ywca.org
securedns3.planmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG

Certificate

The complete raw certificate details for securedns3.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOxTCCDa2gAwIBAgISA3QcLh5AH8bwUtlpmaF48PbVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MTYxNzUwMDJaFw0yMTA3MTUxNzUwMDJaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczMucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCCpVdjZIgqKAeLa/QhkeGbCnfff5BEx5sJX3CEUYMyMT78pBDZ
sjSP6zRDlReYDYofXi70teeBByb8IXuvN2xWWf5UEvTBma9eC24Lpv83MN4wsWb2
JsTdv6lQQcdIclEKGiZOWJkDjf69zlPjwKjjyZaoho0V5+z6c2VvDfnV15pqmuDw
cCAoL8Y67buD9pwumL3l410nSvd9mpFtGTCoDvNPgFImmDpMVdCKY+kHlTxCNof/
2/hTe9nIYrD4augaZVQXaY2MXvoVjYYmrLf9dZpkOI+XtXQcNdnNTFVkx3oLdDLp
Pkn2e/KDErstfSmIOjQF2d5dCs5rcQ5o9flnAgMBAAGjggvhMIIL3TAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFK09R7OpR9H/GFz6ShwBfONrINDFMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIKogYDVR0RBIIKmTCCCpWCE2dpZnRwbGFubmluZy5kdS5l
ZHWCH2dpZnRwbGFubmluZy5yYWR5Zm91bmRhdGlvbi5vcmeCFGdpZnRwbGFubmlu
Zy51d20uZWR1ghpnaWZ0cGxhbm5pbmcudmlsbGFub3ZhLmVkdYIUZ2lmdHBsYW5u
aW5nLndzdS5lZHWCF2xlZ2FjeS5jcmlzaXNjZW50ZXIuY29tgg5sZWdhY3kubG11
LmVkdYIdbGVnYWN5Z2lmdC5hc2NlZm91bmRhdGlvbi5vcmeCIm15cGxhbm5lZGdp
ZnQucmlkZ2V2aWV3bWVkaWNhbC5vcmeCGXBsYW5teWdpZnQubW9ycmlzLnVtbi5l
ZHWCFHBsYW5teWxlZ2FjeS51d2YuZWR1gihwbGFubmVkZ2l2aW5nLmJhbm5lcmhl
YWx0aGZvdW5kYXRpb24ub3JnghxwbGFubmVkZ2l2aW5nLmJpbmdoYW10b24uZWR1
ghZwbGFubmVkZ2l2aW5nLmJycmguY29tghpwbGFubmVkZ2l2aW5nLmNhbGR3ZWxs
LmVkdYIacGxhbm5lZGdpdmluZy5jYXJhbW9vci5vcmeCGHBsYW5uZWRnaXZpbmcu
Y2VudHJlLmVkdYIVcGxhbm5lZGdpdmluZy5jbGYub3Jngh9wbGFubmVkZ2l2aW5n
LmNyaXN0b3JleWJhbHQub3JnghpwbGFubmVkZ2l2aW5nLmN1bGluYXJ5LmVkdYIW
cGxhbm5lZGdpdmluZy5jdnRjLmVkdYIVcGxhbm5lZGdpdmluZy5kYXIub3Jnghpw
bGFubmVkZ2l2aW5nLmRhdmlkc29uLmVkdYIicGxhbm5lZGdpdmluZy5lZHdhcmRm
b3VuZGF0aW9uLm9yZ4IjcGxhbm5lZGdpdmluZy5mYXN0ZXJmYXJ0aGVyLmdtdS5l
ZHWCIHBsYW5uZWRnaXZpbmcuZmVud2lja2ZhbGNvbnMub3JnghVwbGFubmVkZ2l2
aW5nLmZodS5lZHWCG3BsYW5uZWRnaXZpbmcuZm9ydGxld2lzLmVkdYIWcGxhbm5l
ZGdpdmluZy5mdnRjLmVkdYIXcGxhbm5lZGdpdmluZy5nZXJvbi5vcmeCG3BsYW5u
ZWRnaXZpbmcuaGhlb25saW5lLm9yZ4IXcGxhbm5lZGdpdmluZy5oc3V0eC5lZHWC
H3BsYW5uZWRnaXZpbmcuaWR5bGx3aWxkYXJ0cy5vcmeCGXBsYW5uZWRnaXZpbmcu
aW5ub3ZpYS5vcmeCFXBsYW5uZWRnaXZpbmcuamJ1LmVkdYIYcGxhbm5lZGdpdmlu
Zy5rZW50cmkub3JnghdwbGFubmVkZ2l2aW5nLmtpZGRvLm9yZ4IWcGxhbm5lZGdp
dmluZy5rem9vLmVkdYIicGxhbm5lZGdpdmluZy5sYWdyYW5nZXN5bXBob255Lm9y
Z4IdcGxhbm5lZGdpdmluZy5sYXRpbnNjaG9vbC5vcmeCFXBsYW5uZWRnaXZpbmcu
bHd2Lm9yZ4IYcGxhbm5lZGdpdmluZy5tYWNvbWIuZWR1gh9wbGFubmVkZ2l2aW5n
Lm1hbm5hZm9vZGJhbmsub3JnghpwbGFubmVkZ2l2aW5nLm1hcnl2YWxlLm9yZ4IU
cGxhbm5lZGdpdmluZy5tYy5lZHWCH3BsYW5uZWRnaXZpbmcubWNnZWhlZXNjaG9v
bC5jb22CFXBsYW5uZWRnaXZpbmcubWNtLmVkdYIXcGxhbm5lZGdpdmluZy5taW5l
cy5lZHWCG3BsYW5uZWRnaXZpbmcubW9yZWhvdXNlLmVkdYIfcGxhbm5lZGdpdmlu
Zy5tc2Zmb3VuZGF0aW9uLm9yZ4IecGxhbm5lZGdpdmluZy5uZXdtYW5zY2hvb2wu
b3JnghxwbGFubmVkZ2l2aW5nLm5vcnRoY3Jvc3Mub3Jngh9wbGFubmVkZ2l2aW5n
Lm5vcnRobWVtb3JpYWwuY29tghtwbGFubmVkZ2l2aW5nLm55Y2JhbGxldC5jb22C
FXBsYW5uZWRnaXZpbmcub2R1LmVkdYIfcGxhbm5lZGdpdmluZy5vaGlvZG9taW5p
Y2FuLmVkdYIYcGxhbm5lZGdpdmluZy5vbGx1c2EuZWR1ghhwbGFubmVkZ2l2aW5n
Lm96YXJrcy5lZHWCGnBsYW5uZWRnaXZpbmcucm9zZW1vbnQuZWR1ghhwbGFubmVk
Z2l2aW5nLnJwYnVzYS5vcmeCFnBsYW5uZWRnaXZpbmcuc2Fsay5lZHWCGnBsYW5u
ZWRnaXZpbmcuc2JzY2hvb2wub3JngiZwbGFubmVkZ2l2aW5nLnNjb3R0aXNocml0
ZWhvc3BpdGFsLm9yZ4IfcGxhbm5lZGdpdmluZy5zZW1lc3RlcmF0c2VhLm9yZ4Ih
cGxhbm5lZGdpdmluZy5zZmhzY29sbGVnZXByZXAub3JnghpwbGFubmVkZ2l2aW5n
LnNpbmNsYWlyLmVkdYIVcGxhbm5lZGdpdmluZy5zcGEuZWR1ghZwbGFubmVkZ2l2
aW5nLnN0YWMuZWR1gh9wbGFubmVkZ2l2aW5nLnN0Y2hhcmxlc3ByZXAub3JngiBw
bGFubmVkZ2l2aW5nLnN0Y2hyaXN0b3BoZXJzLmNvbYIWcGxhbm5lZGdpdmluZy5z
dGhzLm9yZ4IlcGxhbm5lZGdpdmluZy5zdGp1ZGVtZWRpY2FsY2VudGVyLm9yZ4IY
cGxhbm5lZGdpdmluZy5zdGxjb3AuZWR1ghhwbGFubmVkZ2l2aW5nLnN0bGNvcC5v
cmeCInBsYW5uZWRnaXZpbmcuc3RtYXJ5c2RvbWluaWNhbi5vcmeCGHBsYW5uZWRn
aXZpbmcuc3RvbGFmLmVkdYIZcGxhbm5lZGdpdmluZy5zdHBpdXN4Lm9yZ4IVcGxh
bm5lZGdpdmluZy50Y3UuZWR1ghpwbGFubmVkZ2l2aW5nLnRoZWFyY3NmLm9yZ4In
cGxhbm5lZGdpdmluZy50aGVmdXR1cmVvZmhlYWx0aGNhcmUub3JnghlwbGFubmVk
Z2l2aW5nLnRob21hc3UuZWR1gh9wbGFubmVkZ2l2aW5nLnR4YWdsYW5kdHJ1c3Qu
b3JnghdwbGFubmVkZ2l2aW5nLnVjb25uLmVkdYIWcGxhbm5lZGdpdmluZy51Y3Ni
LmVkdYIXcGxhbm5lZGdpdmluZy51bHBnaC5vcmeCFXBsYW5uZWRnaXZpbmcudW50
LmVkdYIVcGxhbm5lZGdpdmluZy51dWEub3JngiNwbGFubmVkZ2l2aW5nLnZuYWNh
cmVuZXdlbmdsYW5kLm9yZ4IVcGxhbm5lZGdpdmluZy52d3UuZWR1ghdwbGFubmVk
Z2l2aW5nLndhbHNoLmVkdYIccGxhbm5lZGdpdmluZy53aWxsaWFtc29uLmVkdYIV
cGxhbm5lZGdpdmluZy53bGMuZWR1ghZwbGFubmVkZ2l2aW5nLndscm4ub3Jnghhw
bGFubmVkZ2l2aW5nLndvbWFucy5vcmeCFnBsYW5uZWRnaXZpbmcud3FlZC5vcmeC
FnBsYW5uZWRnaXZpbmcueXdjYS5vcmeCGXNlY3VyZWRuczMucGxhbm15Z2lmdC5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJ+U6N+uEy63MNPeVAxWBTBkdyJwc3vY
a78mRzTlGxCdnv3WkSKkoA+sa9YRqPOF3Ql+WKsUHlBzMCWOmWQBWaTi3uMz5ohb
xdzhYXm8AyUtPfCqFsWKGkC9LPiByPwLdKMtwIy8cu/DGkk8BnJ7Lu1x2QRpShLv
XHbKiE01uKbvaEx69ZFvzglfNhbs7LVM6WG1ZRAPy7qTU+jAHzzPBUilULl4FSou
skkZ5oS2HfgVyElslVrpoZNiunehrxVvh11SYyasoKmvfjAw+BugM6+e5d7F1i9H
m8F1GqUUh9rXfs9jqymjlHoqQoWp12iHVQAX3oyqypGDjS0xZQ8lAY4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVXY2SIKigHi2v0IZHh
mwp333+QRMebCV9whFGDMjE+/KQQ2bI0j+s0Q5UXmA2KH14u9LXngQcm/CF7rzds
Vln+VBL0wZmvXgtuC6b/NzDeMLFm9ibE3b+pUEHHSHJRChomTliZA43+vc5T48Co
48mWqIaNFefs+nNlbw351deaaprg8HAgKC/GOu27g/acLpi95eNdJ0r3fZqRbRkw
qA7zT4BSJpg6TFXQimPpB5U8QjaH/9v4U3vZyGKw+GroGmVUF2mNjF76FY2GJqy3
/XWaZDiPl7V0HDXZzUxVZMd6C3Qy6T5J9nvygxK7LX0piDo0BdneXQrOa3EOaPX5
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300847070201199796996111402812770121479893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 17:50:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 17:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns3.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16492512509153703423891623436697588629563294575541092480861569845185501775439133907428639687662193415911055562267096960835011782789627161797606390705645312788166050818418454284214752693311906270358424739183036796082901916248987669291039698792886477322836171082156868202637589691898695323481657990311644373535332921710780303997852286486285691383318784154664701762799639593226224603940168082010598255119169334097637210324921342111326808967096354444981431287425763864297601034755318813201489363011365094814788928685322388807632773142772392747132423639177145835169315305952067262769437000875407850739687286102204316252519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad3d47b3a947d1ff185cfa4a1c017ce36b20d0c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2713 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.radyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.villanova.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.crisiscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.ascefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ridgeviewmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.morris.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.uwf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bannerhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.binghamton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caldwell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caramoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreybalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.culinary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edwardfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fasterfarther.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fortlewis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.geron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hheonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsutx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idyllwildarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.innovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.jbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kentri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kiddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kzoo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lagrangesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.latinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.macomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mannafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maryvale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcgeheeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.morehouse.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msffoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.newmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nycballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohiodominican.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ollusa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ozarks.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rosemont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rpbusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.salk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sbschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishritehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.semesteratsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sfhscollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sinclair.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stcharlesprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stchristophers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjudemedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stlcop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stlcop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stmarysdominican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stolaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stpiusx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thearcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thefutureofhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thomasu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.txaglandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ulpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.unt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnacarenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walsh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.williamson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ywca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns3.planmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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