securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:07:7c:d5:1f:b8:06:24:d3:3e:72:d9:72:2d:3d:24:7b:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:7c:d5:1f:b8:06:24:d3:3e:72:d9:72:2d:3d:24:7b:77
Serial Number (int): 263884765237770087715426427076846792506231
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:44:0b:03:90:1f:ff:d6:3b:35:9c:80:c6:bf:5b:49:07:1a:56:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:03:0f:79:25:eb:24:f7:ca:4f:4e:4d:50:8c:b0:26:c5:37:02:80
Fingerprint (sha256): f4:34:01:45:9e:47:05:11:75:21:51:80:b0:7d:11:f1:f8:3c:85:14:b7:08:e7:47:ff:b1:f0:a5:67:06:04:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caresfuture.org
davplanmygift.org
divinity.duke.myplannedgift.org
eastersealspghub.org
evergladeslegacy.org
foodbankpg.org
foundation.convoyofhope.org
foundation.elca.org
founderssociety.abi.org
giftplanning.andover.edu
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
health.usf.planmylegacy.org
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacygiving.sfopera.com
legacyplanning.caritasofaustin.org
mipgc-conference.com
msomusicallegacy.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.arcmh.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.chesapeakeconservancy.org
plannedgiving.childrensal.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.dom.edu
plannedgiving.fenwickfalcons.org
plannedgiving.galvbay.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.kera.org
plannedgiving.maineaudubon.org
plannedgiving.miamijewishhealth.org
plannedgiving.mnopera.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.ppoh.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.sjny.edu
plannedgiving.slu.edu
plannedgiving.trinity.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.umassmed.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.uwp.edu
plannedgiving.valleyymca.org
plannedgiving.vermontpublic.org
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.walnuthillseagles.com
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
www.eastersealspghub.org
www.foodbankpg.org
www.mipgc-conference.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQCjCCDvKgAwIBAgISAwd81R+4BiTTPnLZci09JHt3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTgwNzEyNDZaFw0yNDAyMTYwNzEyNDVaMCQxIjAgBgNVBAMT
GXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChY+aBSoD2CBlV7SQ2cv2jwmFxk8x8mP0lV2ClZoS9bQxgoWKE
gvoYHBfN6rb+lBvVOBEc9o9P55Jf0UHvlz/JV9y9JZijREpZJusJbNqm8sdNxvdD
UXhven383OqncNwTalm/gOr7y9qSNeUiwKj6is69dry7F0e5Xad793dV6FF+yyOY
k+VtZxZMOIJZI90F+d7IF0hTGVnIddS9qeNM3hewt8TZw4QMVzpjB9zxBxUv9xKd
p2ZW4H7p5E7a3rt2XDfDe6s38bvStQbKOOlWxAQIa+pjizcUW912FZZcDJs4o53S
8hFZfkAOacpc9V9iFOpstFB3OU8YHD3rNn85AgMBAAGjgg0mMIINIjAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFAVECwOQH//WOzWcgMa/W0kHGlb+MB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIILLgYDVR0RBIILJTCCCyGCD2NhcmVzZnV0dXJlLm9yZ4IR
ZGF2cGxhbm15Z2lmdC5vcmeCH2RpdmluaXR5LmR1a2UubXlwbGFubmVkZ2lmdC5v
cmeCFGVhc3RlcnNlYWxzcGdodWIub3JnghRldmVyZ2xhZGVzbGVnYWN5Lm9yZ4IO
Zm9vZGJhbmtwZy5vcmeCG2ZvdW5kYXRpb24uY29udm95b2Zob3BlLm9yZ4ITZm91
bmRhdGlvbi5lbGNhLm9yZ4IXZm91bmRlcnNzb2NpZXR5LmFiaS5vcmeCGGdpZnRw
bGFubmluZy5hbmRvdmVyLmVkdYIZZ2lmdHBsYW5uaW5nLmRhdmlkc29uLmVkdYIq
Z2lmdHBsYW5uaW5nLmV2ZXJncmVlbmhlYWx0aGZvdW5kYXRpb24uY29tgh5naWZ0
cGxhbm5pbmcuc2FyYWhsYXdyZW5jZS5lZHWCG2hlYWx0aC51c2YucGxhbm15bGVn
YWN5Lm9yZ4IQbGVnYWN5LmNhcmxlLm9yZ4IObGVnYWN5Lm53Zi5vcmeCH2xlZ2Fj
eWdpdmluZy5hdGxhbnRhbWlzc2lvbi5vcmeCGWxlZ2FjeWdpdmluZy5jYXByYWRp
by5vcmeCGGxlZ2FjeWdpdmluZy5zZm9wZXJhLmNvbYIibGVnYWN5cGxhbm5pbmcu
Y2FyaXRhc29mYXVzdGluLm9yZ4IUbWlwZ2MtY29uZmVyZW5jZS5jb22CFG1zb211
c2ljYWxsZWdhY3kub3JngiBteWxlZ2FjeWdpZnQuYXVndXN0aW5pYW5mdW5kLm9y
Z4IVbXlwbGFuLnNpZXJyYWNsdWIub3Jngh5wbGFubXlsZWdhY3kubm9ydGh3b29k
dGVjaC5lZHWCG3BsYW5uZWRnaWZ0cy5wcm92aWRlbmNlLm9yZ4IVcGxhbm5lZGdp
dmluZy5hYmkub3JngiNwbGFubmVkZ2l2aW5nLmFsdGFtZWRmb3VuZGF0aW9uLm9y
Z4IVcGxhbm5lZGdpdmluZy5hcHMub3JnghdwbGFubmVkZ2l2aW5nLmFyY21oLm9y
Z4IbcGxhbm5lZGdpdmluZy5iZ2NhcmVuYXYub3Jngh9wbGFubmVkZ2l2aW5nLmJp
c2hvcG1hbm9ndWUub3JngiBwbGFubmVkZ2l2aW5nLmJpc2hvcG9jb25uZWxsLm9y
Z4IhcGxhbm5lZGdpdmluZy5ib3N0b25jaGlsZHJlbnMub3JngiFwbGFubmVkZ2l2
aW5nLmJydW5zd2lja3NjaG9vbC5vcmeCGnBsYW5uZWRnaXZpbmcuYnVzaG5lbGwu
ZWR1ghlwbGFubmVkZ2l2aW5nLmNhbGFydHMuZWR1ghtwbGFubmVkZ2l2aW5nLmNh
bGZhcmxleS5vcmeCG3BsYW5uZWRnaXZpbmcuY2F6ZW5vdmlhLmVkdYIpcGxhbm5l
ZGdpdmluZy5jZW50ZXJmb3JlYXJseWVkdWNhdGlvbi5vcmeCIXBsYW5uZWRnaXZp
bmcuY2VudGVyb2Z0aGV3ZXN0Lm9yZ4IYcGxhbm5lZGdpdmluZy5jZnN3aWEub3Jn
gidwbGFubmVkZ2l2aW5nLmNoZXNhcGVha2Vjb25zZXJ2YW5jeS5vcmeCHXBsYW5u
ZWRnaXZpbmcuY2hpbGRyZW5zYWwub3JnghdwbGFubmVkZ2l2aW5nLmNyY2RzLmVk
dYIbcGxhbm5lZGdpdmluZy5kYXBoZWFsdGgub3JnghVwbGFubmVkZ2l2aW5nLmRv
bS5lZHWCIHBsYW5uZWRnaXZpbmcuZmVud2lja2ZhbGNvbnMub3JnghlwbGFubmVk
Z2l2aW5nLmdhbHZiYXkub3JnghlwbGFubmVkZ2l2aW5nLmdpdmVjbWgub3JngiBw
bGFubmVkZ2l2aW5nLmd1dGhyaWV0aGVhdGVyLm9yZ4IWcGxhbm5lZGdpdmluZy5r
ZXJhLm9yZ4IecGxhbm5lZGdpdmluZy5tYWluZWF1ZHVib24ub3JngiNwbGFubmVk
Z2l2aW5nLm1pYW1pamV3aXNoaGVhbHRoLm9yZ4IZcGxhbm5lZGdpdmluZy5tbm9w
ZXJhLm9yZ4IncGxhbm5lZGdpdmluZy5tcG5yZXNlYXJjaGZvdW5kYXRpb24ub3Jn
ghVwbGFubmVkZ2l2aW5nLm1wci5vcmeCGXBsYW5uZWRnaXZpbmcubXNsZWdhbC5v
cmeCFnBsYW5uZWRnaXZpbmcubXRjZi5vcmeCGXBsYW5uZWRnaXZpbmcubXVzb3ds
cy5vcmeCI3BsYW5uZWRnaXZpbmcubmF0aW9uYWxtc3NvY2lldHkub3Jngh1wbGFu
bmVkZ2l2aW5nLm5vcnRoYW1wdG9uLmVkdYIicGxhbm5lZGdpdmluZy5ub3J0aHdl
c3RoYXJ2ZXN0Lm9yZ4IfcGxhbm5lZGdpdmluZy5ucmhmb3VuZGF0aW9uLm9yZ4Il
cGxhbm5lZGdpdmluZy5vcGVyYXRpb25mb29kc2VhcmNoLm9yZ4IgcGxhbm5lZGdp
dmluZy5vcmVnb25mb29kYmFuay5vcmeCFHBsYW5uZWRnaXZpbmcub3UuZWR1ghZw
bGFubmVkZ2l2aW5nLnBjb20uZWR1ghxwbGFubmVkZ2l2aW5nLnBlZ2d5YWRhbXMu
b3JnghZwbGFubmVkZ2l2aW5nLnBwb2gub3JnghxwbGFubmVkZ2l2aW5nLnByb3Zp
ZGVuY2UuZWR1ghpwbGFubmVkZ2l2aW5nLnB1cmNoYXNlLmVkdYIdcGxhbm5lZGdp
dmluZy5zYWludHBldGVycy5lZHWCFXBsYW5uZWRnaXZpbmcuc2VnLm9yZ4IicGxh
bm5lZGdpdmluZy5zaGFkeXNpZGVhY2FkZW15Lm9yZ4IWcGxhbm5lZGdpdmluZy5z
am55LmVkdYIVcGxhbm5lZGdpdmluZy5zbHUuZWR1ghlwbGFubmVkZ2l2aW5nLnRy
aW5pdHkuZWR1ghlwbGFubmVkZ2l2aW5nLnVkYWxsYXMuZWR1ghZwbGFubmVkZ2l2
aW5nLnVoc3AuZWR1ghpwbGFubmVkZ2l2aW5nLnVtYXNzbWVkLmVkdYIbcGxhbm5l
ZGdpdmluZy51c20ubWFpbmUuZWR1gh9wbGFubmVkZ2l2aW5nLnVzbWZvdW5kYXRp
b24uY29tghVwbGFubmVkZ2l2aW5nLnV3cC5lZHWCHHBsYW5uZWRnaXZpbmcudmFs
bGV5eW1jYS5vcmeCH3BsYW5uZWRnaXZpbmcudmVybW9udHB1YmxpYy5vcmeCGXBs
YW5uZWRnaXZpbmcudm1mYS5tdXNldW2CGnBsYW5uZWRnaXZpbmcudm5hdGV4YXMu
b3JnghVwbGFubmVkZ2l2aW5nLnZwci5vcmeCI3BsYW5uZWRnaXZpbmcud2FsbnV0
aGlsbHNlYWdsZXMuY29tghpwbGFubmVkZ2l2aW5nLndhcnRidXJnLmVkdYIgcGxh
bm5lZGdpdmluZy53YXRlcmZvcnBlb3BsZS5vcmeCHHBsYW5uZWRnaXZpbmcud2Ny
aWNobW9uZC5vcmeCHXBsYW5uZWRnaXZpbmcueW1jYWhvdXN0b24ub3JnghhwbGFu
bmVkZ2l2aW5nLnltY2FzZC5vcmeCGXNlY3VyZWRuczQucGxhbm15Z2lmdC5vcmeC
FXd3dy5kYXZwbGFubXlnaWZ0Lm9yZ4IYd3d3LmVhc3RlcnNlYWxzcGdodWIub3Jn
ghJ3d3cuZm9vZGJhbmtwZy5vcmeCGHd3dy5taXBnYy1jb25mZXJlbmNlLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtT
d3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi+F9S58AAAQDAEcwRQIg
KsRS954bbnPGuRtmDzRQ2MuVK42yqxqlKGxaNBCDMjQCIQDoJ7y2+gwNUwsYkrdq
NpqU2uuTy9ceXmy7smFSZ34ZhgB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABi+F9S58AAAQDAEYwRAIgPtojbzOZVxEUfEFuAYreevfa/qpw8nLB
JQ52hXXd8hoCIAltmF3gtF9wkfk6wGXVsnNdLpzCKu70QmZ2Et3kD7gTMA0GCSqG
SIb3DQEBCwUAA4IBAQBBvrMCCXDusoA3HwfgmP7Mqtd8DBVoe+Jp0AaJBlm0Vvj7
6RxjpTQpR8UvqJY4Uro14uw+PsiR50LBvasisziiXEma9qRBgfPIND8iOuKu5glq
+rZwDcBiiwKgZCsnJjCiozDbB5OTzIuY9JJ5zKG2RSD3ayUZE36ln3T74EfwoPqB
U3PayQwDQHk42iLwmQ3Ft3+2lQEdMxLhMJ/uMtFOyX3pHuI9n97wnoydLnsmfoqf
KOipi6MnrRZh7dCGrNjW4tEf1xo/VuOgDmMLxspf+80vOROVv028rLuBpxLpV6fF
tenKOPldSL/wfiWeJczYrQddZSaV4AKGmb5WkA/f
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWPmgUqA9ggZVe0kNnL9
o8JhcZPMfJj9JVdgpWaEvW0MYKFihIL6GBwXzeq2/pQb1TgRHPaPT+eSX9FB75c/
yVfcvSWYo0RKWSbrCWzapvLHTcb3Q1F4b3p9/Nzqp3DcE2pZv4Dq+8vakjXlIsCo
+orOvXa8uxdHuV2ne/d3VehRfssjmJPlbWcWTDiCWSPdBfneyBdIUxlZyHXUvanj
TN4XsLfE2cOEDFc6Ywfc8QcVL/cSnadmVuB+6eRO2t67dlw3w3urN/G70rUGyjjp
VsQECGvqY4s3FFvddhWWXAybOKOd0vIRWX5ADmnKXPVfYhTqbLRQdzlPGBw96zZ/
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263884765237770087715426427076846792506231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 07:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 07:12:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20373629827913508705302027071874185134386087078031432397662002633632259797415517856729975818658429609018594298508407027286284974743224710090683903186065922428039505336157545158834468576448808805238046979893353410333553377712794914708282668252262245419207681059172458237426441436021900781399277128986795694648589829866823251523882581386673316245865275910661315686046326031446860538732907440531662246366453644473114277802303677264365605575278020574900456222879375011764087674587229843013394084340606671472774996407651785702550823890626913768525433114858804996990653811570168912670216790051745549542098570101908588363577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05440b03901fffd63b359c80c6bf5b49071a56fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergladeslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.convoyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.elca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.andover.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.usf.planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipgc-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msomusicallegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arcmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chesapeakeconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.galvbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.miamijewishhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ppoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.trinity.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umassmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uwp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.valleyymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vermontpublic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walnuthillseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mipgc-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be17d4b9f000004030047304502202ac452f79e1b6e73c6b91b660f3450d8cb952b8db2ab1aa5286c5a3410833234022100e827bcb6fa0c0d530b1892b76a369a94daeb93cbd71e5e6cbbb26152677e1986007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018be17d4b9f000004030046304402203eda236f33995711147c416e018ade7af7dafeaa70f272c1250e768575ddf21a0220096d985de0b45f7091f93ac065d5b2735d2e9cc22aeef442667612dde40fb813
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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