securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:7f:e5:cc:f9:09:ec:4f:27:cc:c9:01:84:34:81:bd:b1:af was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7f:e5:cc:f9:09:ec:4f:27:cc:c9:01:84:34:81:bd:b1:af
Serial Number (int): 391970461816700237213377179411342449029551
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:da:9f:ec:ef:47:83:4c:38:8c:ca:7b:c2:31:41:60:9d:9c:14:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:95:a0:35:36:51:c6:2e:77:ca:13:27:fe:b4:77:bc:ef:43:e6:8a
Fingerprint (sha256): 08:ca:6d:ee:9a:6d:84:20:68:d5:47:fd:8e:f0:a4:48:95:0c:c8:9a:9a:9a:98:75:6e:4b:9b:50:6c:f1:37:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caresfuture.org
davplanmygift.org
divinity.duke.myplannedgift.org
foundation.convoyofhope.org
foundation.elca.org
founderssociety.abi.org
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.msu.edu
giftplanning.sarahlawrence.edu
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacygiving.sfopera.com
legacyplanning.caritasofaustin.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.arcmh.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.chesapeakeconservancy.org
plannedgiving.childrensal.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.dom.edu
plannedgiving.fenwickfalcons.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.kera.org
plannedgiving.maineaudubon.org
plannedgiving.miamijewishhealth.org
plannedgiving.mnopera.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.ppoh.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.sjny.edu
plannedgiving.slu.edu
plannedgiving.trinity.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.valleyymca.org
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.walnuthillseagles.com
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx/y4MKi38/oHXJqg8zH
lMS1+WGdzjVmHKHl9D40i2+lNY0tQ231sZpBItp6PzK0hz5YQB7e0K0Q1khSE6uP
9ej/uJWMbPb5V2NoJ+O32O/SItT/2fgzY4EtFaGvpunfBf33aXmorMME1jexbJ+v
RWw5x+p8x2fsHLZX1OBy2xZW1nvmBbLP0NZzvN9M6ZAKYDsKXj99wNvOP/6OWCMr
QtVy0fMU8K7IbeMMIGSk2dCoWhpXlJapA3lTAmXiyjJtKLloS8T+E/ou6y0f8hMo
aTyBG0801aVktRW3hMMyITQB3V78+5ZsVaxTynkmIG/bORO6YAl1oEK1beC7Yd3y
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391970461816700237213377179411342449029551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 19:50:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-30 19:50:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21097551441225193140232599678547990941613736488014393061071606837245171739937462579989863635140870835835553453725508469688432636830418007420840491393572626483050111666942917012048394030791229382456496012392524643365432341606612545259911513995297218806908950566394608457233067985596248690531487220032012278613913069981708334558968064169305815567948025875195005660787537904616734963149353338417825106335225211084500619394578860972363305204535097885780215019299934782650455418459807255347716529401324401022819081436392178578657269062936169367621300571091349736794932390793084698557855945330841492116548708911118899081801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98da9fecef47834c388cca7bc23141609d9c1429
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.convoyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.elca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arcmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chesapeakeconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.miamijewishhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ppoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.trinity.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.valleyymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walnuthillseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001825b2c937e000004030047304502204996686cc08816666e409626a42f59fb603cc2dad32dfd90cae4ed2d5fe267ba02210094b2e2899baf92e102e13882f961da486fc252dae2720e0cfe891d028db8a26300760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001825b2c938600000403004730450220409e384dc4f601f7e54b3c84dfa779dff647603fe1a81f503fdc1bdce7bc76a5022100c945e0821572f89ec9c6c8685d3b54c94951c6fca7318f0cb85915ebab2c0117
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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