securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a3:9e:ca:37:89:72:7c:17:3d:d3:47:67:1a:66:36:cd:df was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:9e:ca:37:89:72:7c:17:3d:d3:47:67:1a:66:36:cd:df
Serial Number (int): 317013951597115368000473782058952185794015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:6c:48:2e:46:4a:ac:90:df:c2:f6:09:71:bd:be:14:9d:34:43:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:87:22:49:54:98:d6:08:f2:fa:1e:c6:b0:d3:23:f1:31:a4:97:91
Fingerprint (sha256): 5b:e9:2c:86:65:6e:85:be:2f:59:5e:f7:e1:6e:a9:e6:c4:7f:9e:67:7f:2d:c2:b8:4e:12:09:a2:c9:a3:9d:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caresfuture.org
davplanmygift.org
divinity.duke.myplannedgift.org
eastersealspghub.org
evergladeslegacy.org
foodbankpg.org
foundation.convoyofhope.org
foundation.elca.org
founderssociety.abi.org
giftplanning.andover.edu
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
health.usf.planmylegacy.org
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacygiving.sfopera.com
legacyplanning.caritasofaustin.org
mipgc-conference.com
msomusicallegacy.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.arcmh.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.chesapeakeconservancy.org
plannedgiving.childrensal.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.dom.edu
plannedgiving.fenwickfalcons.org
plannedgiving.galvbay.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.kera.org
plannedgiving.maineaudubon.org
plannedgiving.miamijewishhealth.org
plannedgiving.mnopera.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.ppoh.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.sjny.edu
plannedgiving.slu.edu
plannedgiving.trinity.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.umassmed.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.uwp.edu
plannedgiving.valleyymca.org
plannedgiving.vermontpublic.org
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.walnuthillseagles.com
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
www.eastersealspghub.org
www.foodbankpg.org
www.mipgc-conference.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQRDCCDyygAwIBAgISA6OeyjeJcnwXPdNHZxpmNs3fMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMDYyMTE2MDlaFw0yMzA2MDQyMTE2MDhaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoR5lKMiverBV73dXx+nv0Rf26uEhApn6x72gKk47tC1V4o9aq
yrnk5PhPZY0QtA9+bduqMj92cDmphZYOYTdVS0wj1O93g1qjHo+SMXVZ3Da/e+7L
YmEGjW9mUNRFQH3ca7z0Ql4pKMcx51DB5Z1jR0M/sQHJHS/W1oH96E+QejMB+Bid
BnMiUYscgRIB2DxnO1R62ivyjoWHijE0HWKoTh4hidoOXj6juAjjV+if+Cp3btiU
H9VYUM2hPihEMXoV6AQwe6k+rk205L6pLINWdWIGfK0G+Ol+XPkMZ0kdBi0xLjvI
UVxzeaz1+FZADwZ9YfvFQ4z7jAWD5eAhBeaBAgMBAAGjgg1gMIINXDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCNsSC5GSqyQ38L2CXG9vhSdNEOQMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIILLgYDVR0RBIILJTCCCyGCD2NhcmVzZnV0dXJlLm9yZ4IR
ZGF2cGxhbm15Z2lmdC5vcmeCH2RpdmluaXR5LmR1a2UubXlwbGFubmVkZ2lmdC5v
cmeCFGVhc3RlcnNlYWxzcGdodWIub3JnghRldmVyZ2xhZGVzbGVnYWN5Lm9yZ4IO
Zm9vZGJhbmtwZy5vcmeCG2ZvdW5kYXRpb24uY29udm95b2Zob3BlLm9yZ4ITZm91
bmRhdGlvbi5lbGNhLm9yZ4IXZm91bmRlcnNzb2NpZXR5LmFiaS5vcmeCGGdpZnRw
bGFubmluZy5hbmRvdmVyLmVkdYIZZ2lmdHBsYW5uaW5nLmRhdmlkc29uLmVkdYIq
Z2lmdHBsYW5uaW5nLmV2ZXJncmVlbmhlYWx0aGZvdW5kYXRpb24uY29tgh5naWZ0
cGxhbm5pbmcuc2FyYWhsYXdyZW5jZS5lZHWCG2hlYWx0aC51c2YucGxhbm15bGVn
YWN5Lm9yZ4IQbGVnYWN5LmNhcmxlLm9yZ4IObGVnYWN5Lm53Zi5vcmeCH2xlZ2Fj
eWdpdmluZy5hdGxhbnRhbWlzc2lvbi5vcmeCGWxlZ2FjeWdpdmluZy5jYXByYWRp
by5vcmeCGGxlZ2FjeWdpdmluZy5zZm9wZXJhLmNvbYIibGVnYWN5cGxhbm5pbmcu
Y2FyaXRhc29mYXVzdGluLm9yZ4IUbWlwZ2MtY29uZmVyZW5jZS5jb22CFG1zb211
c2ljYWxsZWdhY3kub3JngiBteWxlZ2FjeWdpZnQuYXVndXN0aW5pYW5mdW5kLm9y
Z4IVbXlwbGFuLnNpZXJyYWNsdWIub3Jngh5wbGFubXlsZWdhY3kubm9ydGh3b29k
dGVjaC5lZHWCG3BsYW5uZWRnaWZ0cy5wcm92aWRlbmNlLm9yZ4IVcGxhbm5lZGdp
dmluZy5hYmkub3JngiNwbGFubmVkZ2l2aW5nLmFsdGFtZWRmb3VuZGF0aW9uLm9y
Z4IVcGxhbm5lZGdpdmluZy5hcHMub3JnghdwbGFubmVkZ2l2aW5nLmFyY21oLm9y
Z4IbcGxhbm5lZGdpdmluZy5iZ2NhcmVuYXYub3Jngh9wbGFubmVkZ2l2aW5nLmJp
c2hvcG1hbm9ndWUub3JngiBwbGFubmVkZ2l2aW5nLmJpc2hvcG9jb25uZWxsLm9y
Z4IhcGxhbm5lZGdpdmluZy5ib3N0b25jaGlsZHJlbnMub3JngiFwbGFubmVkZ2l2
aW5nLmJydW5zd2lja3NjaG9vbC5vcmeCGnBsYW5uZWRnaXZpbmcuYnVzaG5lbGwu
ZWR1ghlwbGFubmVkZ2l2aW5nLmNhbGFydHMuZWR1ghtwbGFubmVkZ2l2aW5nLmNh
bGZhcmxleS5vcmeCG3BsYW5uZWRnaXZpbmcuY2F6ZW5vdmlhLmVkdYIpcGxhbm5l
ZGdpdmluZy5jZW50ZXJmb3JlYXJseWVkdWNhdGlvbi5vcmeCIXBsYW5uZWRnaXZp
bmcuY2VudGVyb2Z0aGV3ZXN0Lm9yZ4IYcGxhbm5lZGdpdmluZy5jZnN3aWEub3Jn
gidwbGFubmVkZ2l2aW5nLmNoZXNhcGVha2Vjb25zZXJ2YW5jeS5vcmeCHXBsYW5u
ZWRnaXZpbmcuY2hpbGRyZW5zYWwub3JnghdwbGFubmVkZ2l2aW5nLmNyY2RzLmVk
dYIbcGxhbm5lZGdpdmluZy5kYXBoZWFsdGgub3JnghVwbGFubmVkZ2l2aW5nLmRv
bS5lZHWCIHBsYW5uZWRnaXZpbmcuZmVud2lja2ZhbGNvbnMub3JnghlwbGFubmVk
Z2l2aW5nLmdhbHZiYXkub3JnghlwbGFubmVkZ2l2aW5nLmdpdmVjbWgub3JngiBw
bGFubmVkZ2l2aW5nLmd1dGhyaWV0aGVhdGVyLm9yZ4IWcGxhbm5lZGdpdmluZy5r
ZXJhLm9yZ4IecGxhbm5lZGdpdmluZy5tYWluZWF1ZHVib24ub3JngiNwbGFubmVk
Z2l2aW5nLm1pYW1pamV3aXNoaGVhbHRoLm9yZ4IZcGxhbm5lZGdpdmluZy5tbm9w
ZXJhLm9yZ4IncGxhbm5lZGdpdmluZy5tcG5yZXNlYXJjaGZvdW5kYXRpb24ub3Jn
ghVwbGFubmVkZ2l2aW5nLm1wci5vcmeCGXBsYW5uZWRnaXZpbmcubXNsZWdhbC5v
cmeCFnBsYW5uZWRnaXZpbmcubXRjZi5vcmeCGXBsYW5uZWRnaXZpbmcubXVzb3ds
cy5vcmeCI3BsYW5uZWRnaXZpbmcubmF0aW9uYWxtc3NvY2lldHkub3Jngh1wbGFu
bmVkZ2l2aW5nLm5vcnRoYW1wdG9uLmVkdYIicGxhbm5lZGdpdmluZy5ub3J0aHdl
c3RoYXJ2ZXN0Lm9yZ4IfcGxhbm5lZGdpdmluZy5ucmhmb3VuZGF0aW9uLm9yZ4Il
cGxhbm5lZGdpdmluZy5vcGVyYXRpb25mb29kc2VhcmNoLm9yZ4IgcGxhbm5lZGdp
dmluZy5vcmVnb25mb29kYmFuay5vcmeCFHBsYW5uZWRnaXZpbmcub3UuZWR1ghZw
bGFubmVkZ2l2aW5nLnBjb20uZWR1ghxwbGFubmVkZ2l2aW5nLnBlZ2d5YWRhbXMu
b3JnghZwbGFubmVkZ2l2aW5nLnBwb2gub3JnghxwbGFubmVkZ2l2aW5nLnByb3Zp
ZGVuY2UuZWR1ghpwbGFubmVkZ2l2aW5nLnB1cmNoYXNlLmVkdYIdcGxhbm5lZGdp
dmluZy5zYWludHBldGVycy5lZHWCFXBsYW5uZWRnaXZpbmcuc2VnLm9yZ4IicGxh
bm5lZGdpdmluZy5zaGFkeXNpZGVhY2FkZW15Lm9yZ4IWcGxhbm5lZGdpdmluZy5z
am55LmVkdYIVcGxhbm5lZGdpdmluZy5zbHUuZWR1ghlwbGFubmVkZ2l2aW5nLnRy
aW5pdHkuZWR1ghlwbGFubmVkZ2l2aW5nLnVkYWxsYXMuZWR1ghZwbGFubmVkZ2l2
aW5nLnVoc3AuZWR1ghpwbGFubmVkZ2l2aW5nLnVtYXNzbWVkLmVkdYIbcGxhbm5l
ZGdpdmluZy51c20ubWFpbmUuZWR1gh9wbGFubmVkZ2l2aW5nLnVzbWZvdW5kYXRp
b24uY29tghVwbGFubmVkZ2l2aW5nLnV3cC5lZHWCHHBsYW5uZWRnaXZpbmcudmFs
bGV5eW1jYS5vcmeCH3BsYW5uZWRnaXZpbmcudmVybW9udHB1YmxpYy5vcmeCGXBs
YW5uZWRnaXZpbmcudm1mYS5tdXNldW2CGnBsYW5uZWRnaXZpbmcudm5hdGV4YXMu
b3JnghVwbGFubmVkZ2l2aW5nLnZwci5vcmeCI3BsYW5uZWRnaXZpbmcud2FsbnV0
aGlsbHNlYWdsZXMuY29tghpwbGFubmVkZ2l2aW5nLndhcnRidXJnLmVkdYIgcGxh
bm5lZGdpdmluZy53YXRlcmZvcnBlb3BsZS5vcmeCHHBsYW5uZWRnaXZpbmcud2Ny
aWNobW9uZC5vcmeCHXBsYW5uZWRnaXZpbmcueW1jYWhvdXN0b24ub3JnghhwbGFu
bmVkZ2l2aW5nLnltY2FzZC5vcmeCGXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmeC
FXd3dy5kYXZwbGFubXlnaWZ0Lm9yZ4IYd3d3LmVhc3RlcnNlYWxzcGdodWIub3Jn
ghJ3d3cuZm9vZGJhbmtwZy5vcmeCGHd3dy5taXBnYy1jb25mZXJlbmNlLmNvbTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhrj/EHYA
AAQDAEcwRQIgdv/UzTMSa77rV78UA7RPiWUrh4HUbVeGMwMUP6BV7n8CIQDm18AX
SnNF2S/2nVGaGZkbFqVq40zA1Y2jCjF1gYx2wQB2AHoyjFTYty22IOo44FIe6YQW
cDIThU070ivBOlejUutSAAABhrj/EIYAAAQDAEcwRQIgR4/E30dtKpjeLEXrP4o2
SnDn7Hpu/ZFqYAdKcibMblACIQDvt3U1GHNqtnyXgLt5T1qaIOjT8KtQGF/WP65G
DCTTRzANBgkqhkiG9w0BAQsFAAOCAQEAMR2dG7YVNyQn8cBejHmYKMRkAhejV11h
QzngtC7dHxWTJx7iUIKSod/6D88py5nVK4JTiOTFVvzyUuy9/0lq3uJ/0WxFjxGk
r/N9gYpTCs80M+9TUGquN9CwvEByFaLQoA7VSjodoap+L70ofOEqYZ8GPSJlAps+
w7crI1Tqw/7a6AKtgAogeUWYbOG5pb6xxm8gxPP3hiA5Mhq3yj1WtXLB1IDqed2b
LhL+QgTimMsqzIqeOxDqKUf3JLeH2qM6bjI9iEcYlav1l0j7cM5Rpu7Qhgwpcfay
k934N137OiOtXk6DIhTxdvRemmc/QTtRhBGLmpkp0VaB94mCWs5OEQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EeZSjIr3qwVe93V8fp7
9EX9urhIQKZ+se9oCpOO7QtVeKPWqsq55OT4T2WNELQPfm3bqjI/dnA5qYWWDmE3
VUtMI9Tvd4Naox6PkjF1Wdw2v3vuy2JhBo1vZlDURUB93Gu89EJeKSjHMedQweWd
Y0dDP7EByR0v1taB/ehPkHozAfgYnQZzIlGLHIESAdg8ZztUetor8o6Fh4oxNB1i
qE4eIYnaDl4+o7gI41fon/gqd27YlB/VWFDNoT4oRDF6FegEMHupPq5NtOS+qSyD
VnViBnytBvjpflz5DGdJHQYtMS47yFFcc3ms9fhWQA8GfWH7xUOM+4wFg+XgIQXm
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317013951597115368000473782058952185794015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 21:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 21:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29322593430579048770934665571491095122214114058389761585614632954385385834721780812545322404765593629308503187830574562139050082397566276681250844659838947082099495676968873274807686961090585124272502260664221854516438254317116967547851408330961995549170269362238665947247184993114759238675778692720172052505638055608110604050820948488299703646935566628078076950978011366721183103748879025218225317644121300686395617446766972341793712274066867767068830722122622838870602333591267114135457231692204721502710527274332648530988236385430292547600826915952548586854176542574214053941323357860498324761965955045331617310337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							236c482e464aac90dfc2f60971bdbe149d344390
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergladeslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.convoyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.elca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.andover.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.usf.planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipgc-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msomusicallegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arcmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chesapeakeconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.galvbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.miamijewishhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ppoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.trinity.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umassmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uwp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.valleyymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vermontpublic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walnuthillseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mipgc-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186b8ff10760000040300473045022076ffd4cd33126bbeeb57bf1403b44f89652b8781d46d57863303143fa055ee7f022100e6d7c0174a7345d92ff69d519a19991b16a56ae34cc0d58da30a3175818c76c10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186b8ff108600000403004730450220478fc4df476d2a98de2c45eb3f8a364a70e7ec7a6efd916a60074a7226cc6e50022100efb7753518736ab67c9780bb794f5a9a20e8d3f0ab50185fd63fae460c24d347
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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