securedns1.planmygift.org
Issued by R3
About this certificate
This digital certificate with serial number 03:47:72:24:8c:93:e9:f5:c1:fb:1a:1b:96:07:b1:4e:15:e0 was issued on by Let's Encrypt.
With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=securedns1.planmygift.org
Let's Encrypt
This certificate will expire on
Certificate Details
Serial Number (hex): 03:47:72:24:8c:93:e9:f5:c1:fb:1a:1b:96:07:b1:4e:15:e0Serial Number (int): 285648627612130050020070597920591922992608
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e4:35:83:4f:24:7c:36:12:3a:3f:e4:d2:1b:c3:09:74:f6:b8:fd:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 34:c5:b2:8b:3c:08:6e:d7:c9:e6:17:c6:7c:11:a0:96:2c:5d:32:da
Fingerprint (sha256): 03:c6:a2:d3:e4:d6:37:30:01:f7:cf:f4:f8:1c:d7:02:5b:92:c0:f6:18:c0:82:08:7d:9b:ad:59:10:7c:80:ed
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate securedns1.planmygift.org
93
0
0
Advanced Certificate Properties
Tehnical certificate details for securedns1.planmygift.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.emoryhealthcare.org
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.ccsfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacygift.wmualumni.org
pg.unthsc.edu
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.adventhealth.com
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.atlantasymphony.org
plannedgiving.au.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.calpoly.edu
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.creighton.edu
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.eden2.org
plannedgiving.facs.org
plannedgiving.feedingamerica.org
plannedgiving.focushope.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.guidedogsofamerica.org
plannedgiving.hillel.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.kxt.org
plannedgiving.metopera.org
plannedgiving.mnzoo.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.ohiodominican.edu
plannedgiving.oregonfoodbank.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.rowan.edu
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.spsmw.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.mycathedrallegacy.com
Other certificates including the domain name planmygift.org
(limited to 100 certificates)
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org
Certificate
The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIPUzCCDjugAwIBAgISA0dyJIyT6fXB+xoblgexThXgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTIxOTQ1MDZaFw0yNDA3MTExOTQ1MDVaMCQxIjAgBgNVBAMT GXNlY3VyZWRuczEucGxhbm15Z2lmdC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzoVSecKqDlcOvzQ+IrIGR3s7NdQ7zrpJtsAVYOdYTLZV/ROtV S5m+1YJgO1G45C6v7FNiCNoeY9yFTL2qeaHMDZ89PXYmbmVCVjNUn8ODcyjD8Rs8 iefyWWlChbxb8+Qb+bEAgffYm+N6q5QmHmG7p8Yq1vEPYqWJ29Eyqux7SL7ERYPZ ssgQt6vQWrQF0Xz2e7zfEOlZ/m7WskFC/wzKzcSLzpskhkyGyxdEyeuq8mwKWDhD XM9MP7tJ/6lhnoWdyXjm3Y/7kohHKSR0XiI9c9CmJLGW5bwhfjylyFwvMxdUcYi7 si5jNAdO7B36Mt1UB1r1Vd57YagR//kof51ZAgMBAAGjggxvMIIMazAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFOQ1g08kfDYSOj/k0hvDCXT2uP2hMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMIIKdwYDVR0RBIIKbjCCCmqCF2ZvcmV2ZXJzeXJhY3VzZS5z eXIuZWR1ghlnaWZ0cGxhbm5pbmcuY2hpb21lZ2EuY29tghpnaWZ0cGxhbm5pbmcu Y29sb3N0YXRlLmVkdYIWZ2lmdHBsYW5uaW5nLmVtb3J5LmVkdYIgZ2lmdHBsYW5u aW5nLmVtb3J5aGVhbHRoY2FyZS5vcmeCHWdpZnRwbGFubmluZy5oYXJsZXlzY2hv b2wub3JnghhnaWZ0cGxhbm5pbmcuaXN1Z2lmdC5vcmeCHWdpZnRwbGFubmluZy5u b3J0aHdlc3Rlcm4uZWR1ghRnaWZ0cGxhbm5pbmcudXRrLmVkdYIYbGVnYWN5LmNj c2ZvdW5kYXRpb24ub3JnghVsZWdhY3kucGF0aGZpbmRlci5vcmeCFWxlZ2FjeS52 ZXJtb250cGJzLm9yZ4IpbW9udGVyZXliYXlhcXVhcml1bS5vY2VhbmxlZ2FjeWNp cmNsZS5vcmeCFW15Y2F0aGVkcmFsbGVnYWN5LmNvbYIabXlsZWdhY3lnaWZ0Lndt dWFsdW1uaS5vcmeCDXBnLnVudGhzYy5lZHWCHHBsYW4uY2FwaXRhbGFyZWFmb29k YmFuay5vcmeCFXBsYW5teWdpZnQuc2ZzcGNhLm9yZ4IecGxhbm5lZGdpdmluZy5h ZHZlbnRoZWFsdGguY29tghtwbGFubmVkZ2l2aW5nLmFmbW9ubGluZS5vcmeCFnBs YW5uZWRnaXZpbmcuYWxsYi5vcmeCIXBsYW5uZWRnaXZpbmcuYWxsaWFuY2V0aGVh dHJlLm9yZ4IdcGxhbm5lZGdpdmluZy5hbHBoYWNoaXJoby5vcmeCGHBsYW5uZWRn aXZpbmcuYXJjaG55Lm9yZ4IacGxhbm5lZGdpdmluZy5hc2lhbmFydC5vcmeCIXBs YW5uZWRnaXZpbmcuYXRsYW50YXN5bXBob255Lm9yZ4IUcGxhbm5lZGdpdmluZy5h dS5vcmeCGXBsYW5uZWRnaXZpbmcuYmFybmFyZC5lZHWCF3BsYW5uZWRnaXZpbmcu YmFycnkuZWR1gh1wbGFubmVkZ2l2aW5nLmJsYWtlc2Nob29sLm9yZ4IdcGxhbm5l ZGdpdmluZy5icmVja3NjaG9vbC5vcmeCHXBsYW5uZWRnaXZpbmcuYnJpZ2h0Zm9j dXMub3JnghlwbGFubmVkZ2l2aW5nLmNhbHBvbHkuZWR1ghhwbGFubmVkZ2l2aW5n LmNjY25lYi5lZHWCF3BsYW5uZWRnaXZpbmcuY2Nzd3cub3JngiBwbGFubmVkZ2l2 aW5nLmNoaWxkYWR2b2NhdGVzLm9yZ4IjcGxhbm5lZGdpdmluZy5jaGlsZHJlbnNu YXRpb25hbC5vcmeCJHBsYW5uZWRnaXZpbmcuY2hyaXN0Y2h1cmNoc2Nob29sLm9y Z4IdcGxhbm5lZGdpdmluZy5jb25zZXJ2YW5jeS5vcmeCG3BsYW5uZWRnaXZpbmcu Y3JlaWdodG9uLmVkdYIjcGxhbm5lZGdpdmluZy5jcmlzdG9yZXlzdG1hcnRpbi5v cmeCInBsYW5uZWRnaXZpbmcuY3JvY2tlcmFydG11c2V1bS5vcmeCKXBsYW5uZWRn aXZpbmcuY3JvaG5zY29saXRpc2ZvdW5kYXRpb24ub3JnghdwbGFubmVkZ2l2aW5n LmRjY2NkLmVkdYIccGxhbm5lZGdpdmluZy5kZW52ZXJ5bWNhLm9yZ4IYcGxhbm5l ZGdpdmluZy5kZXNtZXQub3JnghlwbGFubmVkZ2l2aW5nLmRpb3NocHQub3Jnghdw bGFubmVkZ2l2aW5nLmVkZW4yLm9yZ4IWcGxhbm5lZGdpdmluZy5mYWNzLm9yZ4Ig cGxhbm5lZGdpdmluZy5mZWVkaW5nYW1lcmljYS5vcmeCG3BsYW5uZWRnaXZpbmcu Zm9jdXNob3BlLmVkdYIbcGxhbm5lZGdpdmluZy5nYWxsYXVkZXQuZWR1ghZwbGFu bmVkZ2l2aW5nLmdiZmIub3JnghZwbGFubmVkZ2l2aW5nLmdjZmIub3JnghZwbGFu bmVkZ2l2aW5nLmdub2Yub3JngiVwbGFubmVkZ2l2aW5nLmdvb2R3aWxsZWFzdGVy c2VhbHMub3JnghlwbGFubmVkZ2l2aW5nLmdyYWxhbmQub3Jngh1wbGFubmVkZ2l2 aW5nLmdyZWF0Y2lyY2xlLm9yZ4IfcGxhbm5lZGdpdmluZy5ncmVlbnNib3JvZGF5 Lm9yZ4IkcGxhbm5lZGdpdmluZy5ndWlkZWRvZ3NvZmFtZXJpY2Eub3JnghhwbGFu bmVkZ2l2aW5nLmhpbGxlbC5vcmeCFnBsYW5uZWRnaXZpbmcuaHNtby5vcmeCIHBs YW5uZWRnaXZpbmcuam9obnN0b25oZWFsdGgub3JnghtwbGFubmVkZ2l2aW5nLmp1 aWxsaWFyZC5lZHWCJHBsYW5uZWRnaXZpbmcua2Fuc2FzaGVhbHRoc3lzdGVtLmNv bYIVcGxhbm5lZGdpdmluZy5reHQub3JnghpwbGFubmVkZ2l2aW5nLm1ldG9wZXJh Lm9yZ4IXcGxhbm5lZGdpdmluZy5tbnpvby5vcmeCHHBsYW5uZWRnaXZpbmcubW9z YWljaW5mby5vcmeCF3BsYW5uZWRnaXZpbmcubXN1YWYub3JnghtwbGFubmVkZ2l2 aW5nLm11dHR2aWxsZS5vcmeCFXBsYW5uZWRnaXZpbmcubnNzLm9yZ4IfcGxhbm5l ZGdpdmluZy5vaGlvZG9taW5pY2FuLmVkdYIgcGxhbm5lZGdpdmluZy5vcmVnb25m b29kYmFuay5vcmeCFnBsYW5uZWRnaXZpbmcucGFyay5lZHWCFnBsYW5uZWRnaXZp bmcucGl0dC5lZHWCIHBsYW5uZWRnaXZpbmcucmFuZ2VsYW5kdHJ1c3Qub3Jnghdw bGFubmVkZ2l2aW5nLnJvd2FuLmVkdYIWcGxhbm5lZGdpdmluZy5zZHN1LmVkdYIW cGxhbm5lZGdpdmluZy5zaGZiLm9yZ4IZcGxhbm5lZGdpdmluZy5zamExODkwLm9y Z4IXcGxhbm5lZGdpdmluZy5zcHNtdy5vcmeCGnBsYW5uZWRnaXZpbmcuc3QtYWdu ZXMub3JngiNwbGFubmVkZ2l2aW5nLnRyYW5zZm9ybWluZ2xpdmVzLm9yZ4IWcGxh bm5lZGdpdmluZy51bWJjLmVkdYIecGxhbm5lZGdpdmluZy51dGZvdW5kYXRpb24u b3JnghlwbGFubmVkZ2l2aW5nLndlcmFpc2Uub3JngiBwbGFubmVkZ2l2aW5nLndv b2RydWZmY2VudGVyLm9yZ4IdcGxhbm5lZGdpdmluZy53dHhmb29kYmFuay5vcmeC FnBsYW5uZWRnaXZpbmcud3Z3Yy5lZHWCGHBsYW5uZWRnaXZpbmcueW1jYWJyLm9y Z4IZc2VjdXJlZG5zMS5wbGFubXlnaWZ0Lm9yZ4IZd3d3Lm15Y2F0aGVkcmFsbGVn YWN5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjtQOit4A AAQDAEYwRAIgHe0v9C9X2u12KQefGEVePET1wFIuapPyrDU6E7TfkNwCICgUx/dD bt4jRzeYN69hpSf99e0K0Gm9J9gMkQx0ouDvAHYA3+FW66oFr7WcD4ZxjajAMk6u Vtlup/WlagHRwTu+UlwAAAGO1A6LUwAABAMARzBFAiAk8PG1I2m6TAqZ4ELQKH2f KXGWIGdZBGQwtXO18KNOAAIhAN6jBii0Hu+Sx8mlFn6egaq0aiVAt7zvDIaiQvf6 QnuNMA0GCSqGSIb3DQEBCwUAA4IBAQALMChtmfHtkryZz9RVYlKqME4rAFJOExsP +m+YZkkn/McuIw5WSXlWnFaPZdJUTLCl+s6nHUUQ8Sg4d+jy6+toruktGKPr3Odk VaxY5hBmHWWQd323vBDBT5id0m2svfAOsjDI6qwz5BUSFlh86lBJgsz/zY4GFPOP zHyjPZ0FEPm7kwywM+N1IAfky24GEZzw+LlbXI35DqY/FFXmJGirD8v0f/+/C+iS OP4QOEpf4VFI3z1UfAIZS9ZezpQz4BhVDSdiseNbv/I0v7bYPQdtx2VEifA4iJLA Ql3DKrci92cjRuiSV6M9JS0FV0abktBoPNd17KeHe0zziWa+M0kN -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6FUnnCqg5XDr80PiKyB kd7OzXUO866SbbAFWDnWEy2Vf0TrVUuZvtWCYDtRuOQur+xTYgjaHmPchUy9qnmh zA2fPT12Jm5lQlYzVJ/Dg3Mow/EbPInn8llpQoW8W/PkG/mxAIH32JvjequUJh5h u6fGKtbxD2KlidvRMqrse0i+xEWD2bLIELer0Fq0BdF89nu83xDpWf5u1rJBQv8M ys3Ei86bJIZMhssXRMnrqvJsClg4Q1zPTD+7Sf+pYZ6Fncl45t2P+5KIRykkdF4i PXPQpiSxluW8IX48pchcLzMXVHGIu7IuYzQHTuwd+jLdVAda9VXee2GoEf/5KH+d WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 285648627612130050020070597920591922992608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 19:45:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 19:45:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22676211644540099645257764440099471301462070215620406698198830064618340055907279775480893390746629796323260761341868991054548251157224453944603296185239935168309042423350320974975215791928458110171632413250758499356552897562980849449748746662194476993056678093622833887919418413359943374332535627384203444660549406115073884983069302956180265391969509786475041192761206043894736759504675130880578047867203209547962848478461575971087074228556988962134759363872991976602817790569618599104865901787407596050649044651566945885482688777215157959361334531041816466443328966900611722606983248679918302766579066018431137455449 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e435834f247c36123a3fe4d21bc30974f6b8fda1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2670 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emoryhealthcare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adventhealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.au.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.creighton.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hillel.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kxt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnzoo.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ohiodominican.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rowan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spsmw.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ed40e8ade000004030046304402201ded2ff42f57daed7629079f18455e3c44f5c0522e6a93f2ac353a13b4df90dc02202814c7f7436ede2347379837af61a527fdf5ed0ad069bd27d80c910c74a2e0ef007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ed40e8b530000040300473045022024f0f1b52369ba4c0a99e042d0287d9f297196206759046430b573b5f0a34e00022100dea30628b41eef92c7c9a5167e9e81aab46a2540b7bcef0c86a242f7fa427b8d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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