*.givegab.com

- Givegab, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1d:19:8d:6d:77:b2:89:49:fa:6c:0d:d2 was issued on by GlobalSign nv-sa.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Givegab, Inc.

Organization: Givegab, Inc.
State / Province: NY
Locality: Ithaca
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:19:8d:6d:77:b2:89:49:fa:6c:0d:d2
Serial Number (int): 9005956303303668563897486802
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 0c:8f:f4:d0:02:8c:62:29:18:75:de:67:8b:38:bb:6e:28:85:1c:b0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c8:bd:1c:05:c6:5d:e6:90:99:b5:fd:dc:3a:95:2e:2b:06:35:f1:ef
Fingerprint (sha256): 08:68:30:9c:d9:1f:2a:af:db:10:78:10:81:6b:8b:89:12:c6:f7:41:f5:06:6b:0b:b8:b2:0b:bd:f5:28:d2:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate *.givegab.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.givegab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.givegab.com
*.canisiusgivingday.com
*.enterprise.givegab.com
*.igivecatholic.org
*.springiton.org
amplifyatx.ilivehereigivehere.org
amplifyatx.org
avenuesforhope.org
biggivehouston.org
dayofgiving.rochester.edu
domore24delaware.com
dteholiday.org
elpasogivingday.org
embraceastream.org
es.givebigkern.org
es.thebiggivesa.org
extragive.org
fcgives.org
give-more-24.org
givebiggreenbay.org
giveday.luthersem.edu
giveforgoodlouisville.org
givelocalccf.org
givelocallouisville.org
givelocalyork.org
givemore24.org
givewhereyoulivecollier.org
giving.inn.org
givingday.cornell.edu
givingday.umd.edu
givingday.vanderbilt.edu
givingisgorges.org
*.givingisgorges.org
igivecatholic.org
newsmatch.org
steps4students.org
telluridegives.org
texomagives.org
thegreatgive.org
user-content.givegab-cdn.com
wegivecatholic.org
wgtedayofgiving.org
www.amplifyatx.org
www.avenuesforhope.org
www.bigdgives.org
www.biggivehouston.org
www.brooklyngives.org
www.cunytuesday.org
www.domore24delaware.com
www.domore24racine.org
www.dteholiday.org
www.elpasogivingday.org
www.embraceastream.org
www.extragive.org
www.fcgives.org
www.flatheadgives.org
www.flatheadgiving.org
www.givebigchq.org
www.givebigdfw.org
www.givebiggreenbay.org
www.givebiggv.org
www.givebigkern.org
www.givebigpittsburgh.com
www.givedekalbcounty.org
www.giveforgoodlouisville.org
www.givelocalccf.org
www.givelocallouisville.org
www.givelocalyork.org
www.givemore24.org
www.givenday.org
www.givewhereyoulivecollier.org
www.giving-day.org
www.givingday.cornell.edu
www.givingisgorges.org
www.greaterhelenagives.org
www.greatgiveflorida.org
www.horizonsgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.iowa4hgivingday.org
www.kygives.org
www.missoulagives.org
www.mtgives.org
www.newsmatch.org
www.nhgives.org
www.nvbiggive.org
www.nygivesday.org
www.oregoniansgive.org
www.spring2action.org
www.steps4students.org
www.telluridegives.org
www.texomagives.org
www.tggce.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.thegreatgive.org
www.thespringshare.org
www.vermontgives.org
www.wegivecatholic.org
www.wgtedayofgiving.org
www.yellowstonegives.org
givegab.com

Other certificates including the domain name givegab.com

(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net

Certificate

The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXJkGXpbUR8H9FZ//7l
gx+UxaE3ndDcVJ5QeCPpdhM/NDmG4WaWmiDXh/vqm9kiBWdiYNJtxaVTNQyl+p7z
p1JlrlzqxIlvQFuRhitwpiWudIW8EjNZAIcG4IK3unNu19BNEvo1blJ+IlP6Pu9Q
MqpiKBiUsf1YiJst5lIth+QUnmLzwPEJfp1zmwfIBh/CTmbDawlBK0FdsKEXCp2U
FpHagjxKmPP8DwPIYJK00CD59qwJzxVSmaoV2yfGX8Nyjc9KqxrP2xRPqKiLvT5j
uum0g4V1l6cAjp/bQQHDFQQyx5gEXumMdfwu50KU0YrlPgB34K4j4jF8nh0MHEEh
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9005956303303668563897486802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 21:44:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 23:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20800614596536580274010047047173259417941961024304627786367386388498018839251916901688707088259446690192886226539839452969911865526793391818551035480154388240409132130466017893873202060734038519157933024551291722225008032645508996682171352826941752553420364018552965614921737160510569673885412020177984965229563517038086170834240889652069811574050616739481994160009304182480002953968281354982540795366208797289512214613808127704048976426121878327129495622398104446738946371111059353171231654836489748115633629109087558015518019911709882170477876511713293731413060890030766754003669839439278209299204517822532639859041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2260 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprise.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.ilivehereigivehere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avenuesforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dteholiday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embraceastream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-more-24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveday.luthersem.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.inn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.vanderbilt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telluridegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgtedayofgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avenuesforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyngives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24racine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dteholiday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraceastream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigchq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigdfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givenday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving-day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterhelenagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatgiveflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowa4hgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missoulagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbiggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring2action.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telluridegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tggce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespringshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wgtedayofgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowstonegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8ff4d0028c62291875de678b38bb6e28851cb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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