securedns1.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:47:72:24:8c:93:e9:f5:c1:fb:1a:1b:96:07:b1:4e:15:e0 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:47:72:24:8c:93:e9:f5:c1:fb:1a:1b:96:07:b1:4e:15:e0
Serial Number (int): 285648627612130050020070597920591922992608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:35:83:4f:24:7c:36:12:3a:3f:e4:d2:1b:c3:09:74:f6:b8:fd:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:c5:b2:8b:3c:08:6e:d7:c9:e6:17:c6:7c:11:a0:96:2c:5d:32:da
Fingerprint (sha256): 03:c6:a2:d3:e4:d6:37:30:01:f7:cf:f4:f8:1c:d7:02:5b:92:c0:f6:18:c0:82:08:7d:9b:ad:59:10:7c:80:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns1.planmygift.org

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.emoryhealthcare.org
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.ccsfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacygift.wmualumni.org
pg.unthsc.edu
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.adventhealth.com
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.atlantasymphony.org
plannedgiving.au.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.calpoly.edu
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.creighton.edu
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.eden2.org
plannedgiving.facs.org
plannedgiving.feedingamerica.org
plannedgiving.focushope.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.guidedogsofamerica.org
plannedgiving.hillel.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.kxt.org
plannedgiving.metopera.org
plannedgiving.mnzoo.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.ohiodominican.edu
plannedgiving.oregonfoodbank.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.rowan.edu
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.spsmw.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6FUnnCqg5XDr80PiKyB
kd7OzXUO866SbbAFWDnWEy2Vf0TrVUuZvtWCYDtRuOQur+xTYgjaHmPchUy9qnmh
zA2fPT12Jm5lQlYzVJ/Dg3Mow/EbPInn8llpQoW8W/PkG/mxAIH32JvjequUJh5h
u6fGKtbxD2KlidvRMqrse0i+xEWD2bLIELer0Fq0BdF89nu83xDpWf5u1rJBQv8M
ys3Ei86bJIZMhssXRMnrqvJsClg4Q1zPTD+7Sf+pYZ6Fncl45t2P+5KIRykkdF4i
PXPQpiSxluW8IX48pchcLzMXVHGIu7IuYzQHTuwd+jLdVAda9VXee2GoEf/5KH+d
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285648627612130050020070597920591922992608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 19:45:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 19:45:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22676211644540099645257764440099471301462070215620406698198830064618340055907279775480893390746629796323260761341868991054548251157224453944603296185239935168309042423350320974975215791928458110171632413250758499356552897562980849449748746662194476993056678093622833887919418413359943374332535627384203444660549406115073884983069302956180265391969509786475041192761206043894736759504675130880578047867203209547962848478461575971087074228556988962134759363872991976602817790569618599104865901787407596050649044651566945885482688777215157959361334531041816466443328966900611722606983248679918302766579066018431137455449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e435834f247c36123a3fe4d21bc30974f6b8fda1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emoryhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adventhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.au.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.creighton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hillel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kxt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohiodominican.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rowan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spsmw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ed40e8ade000004030046304402201ded2ff42f57daed7629079f18455e3c44f5c0522e6a93f2ac353a13b4df90dc02202814c7f7436ede2347379837af61a527fdf5ed0ad069bd27d80c910c74a2e0ef007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ed40e8b530000040300473045022024f0f1b52369ba4c0a99e042d0287d9f297196206759046430b573b5f0a34e00022100dea30628b41eef92c7c9a5167e9e81aab46a2540b7bcef0c86a242f7fa427b8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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