securedns1.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:44:78:f0:98:8d:3f:d0:4a:d5:5f:67:6e:b4:96:60:b8:45 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:78:f0:98:8d:3f:d0:4a:d5:5f:67:6e:b4:96:60:b8:45
Serial Number (int): 284636815350761973753906027407312752261189
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:2c:31:f6:a9:ea:12:db:8a:30:1b:7a:d7:68:af:1f:00:62:16:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:30:bf:fd:81:36:d5:75:9b:6f:8f:7b:9c:ff:8d:7f:57:77:ee:53
Fingerprint (sha256): 01:a5:80:32:da:95:97:43:a0:6a:9a:b5:72:77:29:03:f5:02:c5:17:79:54:0e:42:b7:80:46:e6:24:b9:5b:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns1.planmygift.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.emoryhealthcare.org
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.amcpfoundation.org
legacy.ccsfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacygift.wmualumni.org
pg.unthsc.edu
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.adventhealth.com
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.atlantasymphony.org
plannedgiving.au.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.calpoly.edu
plannedgiving.cancersupportcommunity.org
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.creighton.edu
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.eden2.org
plannedgiving.facs.org
plannedgiving.feedingamerica.org
plannedgiving.focushope.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.guidedogsofamerica.org
plannedgiving.hillel.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.kxt.org
plannedgiving.lehigh.edu
plannedgiving.metopera.org
plannedgiving.mnzoo.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.ohiodominican.edu
plannedgiving.oregonfoodbank.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.rowan.edu
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.spsmw.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzif8HKLb3NQDpw0NAS25
b/ZPAvsBDWDK5+0pdx9wwubskGJ7NnlPWH8qQxc7lvUKc+us0SlUxBIps+/BdjOT
z6z9pJ5Ejinzj6URX57SMm/q51tAnqJ+VBYZqWmGMcHpeTT3zC4qbyU2UFoP0svD
BwEneYkmBPbYEgOFPzRfDYOTG7iddFb+V5A6KGzyAB+tybCnQhq1qjID+IH4oqPJ
MozQmdWsCo4ZCoOgTs67QJ5mw18T1m83HfXflPv9riRbrDNO2mm68B83frK3uJ/w
6jWwKotPcKvXJqZAxIAPluIGQzhLrQYhOcJy7V97xXPumyKNDiab7ZzZGD5xpmiL
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284636815350761973753906027407312752261189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 14:41:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 14:41:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26024808068654026316445508629230560419017523682550560294814177162466405138593006639000926283630315100258408884793128783266341172205999261460048336300638145492487290156163603951173282942699724931172706057730799886544336347682259347001719561077036021026804038404841921307141898816183514754995953538413061038445657786678618008419679096462967965775614868489437494746704521092679436758904459709714030324382283231109139420646336636282353591713086042191626320329262885242562495874980028943382533398632181142067038911393424997935038181393082298432939248563536017192196342616546552614351445244773609565868681769996922334513957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992c31f6a9ea12db8a301b7ad768af1f006216ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2765 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emoryhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.amcpfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adventhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.au.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.creighton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hillel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kxt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lehigh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohiodominican.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rowan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spsmw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a516814390000040300463044021f65c21cdadca7a1423001a52bc559282e5d771af802dc35c9c28f035fc65c49022100ce1884e6f46da12e9931993ad008e02b49c76bf449e88c5e437b0b6183f9e1f5007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a51681458000004030047304502206661b88f59a4e5152535e113a5dbffd9a07f9eb6302aa8548677607ce94d270e02210092cf8bc9d7fc6db2dfb2e3d361e3c0e3d71c9d4899c0e76c79b851faa2c5396c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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