securedns3.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:76:18:f1:70:a0:77:80:3c:a1:dd:4b:3e:b2:d5:cb:16 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns3.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:76:18:f1:70:a0:77:80:3c:a1:dd:4b:3e:b2:d5:cb:16
Serial Number (int): 327848897760474895975070986268529787259670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:83:87:dc:8d:60:90:2b:6b:af:5e:9f:0a:b5:bc:aa:93:8b:4a:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:30:bc:b8:4d:4b:5b:ad:1b:32:53:b6:dc:2e:18:2c:36:08:34:bf
Fingerprint (sha256): 0d:38:6c:a6:95:8f:53:cb:52:90:a2:12:ed:75:05:b6:9a:d9:6a:3a:bf:4b:63:c1:f1:d2:d2:95:6e:42:88:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns3.planmygift.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns3.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftplanning.du.edu
giftplanning.msu.edu
giftplanning.radyfoundation.org
giftplanning.uwm.edu
giftplanning.villanova.edu
giftplanning.wsu.edu
legacy.crisiscenter.com
legacy.lmu.edu
legacygift.ascefoundation.org
myplannedgift.ridgeviewmedical.org
pg.unthsc.edu
planmygift.morris.umn.edu
planmylegacy.uwf.edu
plannedgiving.bannerhealthfoundation.org
plannedgiving.brrh.com
plannedgiving.caldwell.edu
plannedgiving.caramoor.org
plannedgiving.centre.edu
plannedgiving.clf.org
plannedgiving.cristoreybalt.org
plannedgiving.culinary.edu
plannedgiving.cvtc.edu
plannedgiving.dar.org
plannedgiving.davidson.edu
plannedgiving.edwardfoundation.org
plannedgiving.fasterfarther.gmu.edu
plannedgiving.feedingamerica.org
plannedgiving.fenwickfalcons.org
plannedgiving.fhu.edu
plannedgiving.fortlewis.edu
plannedgiving.fvtc.edu
plannedgiving.geron.org
plannedgiving.hheonline.org
plannedgiving.hsutx.edu
plannedgiving.idyllwildarts.org
plannedgiving.innovia.org
plannedgiving.jbu.edu
plannedgiving.kentri.org
plannedgiving.kiddo.org
plannedgiving.kzoo.edu
plannedgiving.lagrangesymphony.org
plannedgiving.latinschool.org
plannedgiving.lwv.org
plannedgiving.macomb.edu
plannedgiving.mannafoodbank.org
plannedgiving.maryvale.org
plannedgiving.mc.edu
plannedgiving.mcgeheeschool.com
plannedgiving.mcm.edu
plannedgiving.mines.edu
plannedgiving.morehouse.edu
plannedgiving.msffoundation.org
plannedgiving.newmanschool.org
plannedgiving.northcross.org
plannedgiving.northmemorial.com
plannedgiving.nycballet.com
plannedgiving.odu.edu
plannedgiving.ollusa.edu
plannedgiving.ozarks.edu
plannedgiving.rosemont.edu
plannedgiving.rpbusa.org
plannedgiving.salk.edu
plannedgiving.sbschool.org
plannedgiving.scottishritehospital.org
plannedgiving.semesteratsea.org
plannedgiving.sfhscollegeprep.org
plannedgiving.sinclair.edu
plannedgiving.spa.edu
plannedgiving.stac.edu
plannedgiving.sths.org
plannedgiving.stjudemedicalcenter.org
plannedgiving.stmarysdominican.org
plannedgiving.stolaf.edu
plannedgiving.stpiusx.org
plannedgiving.tcu.edu
plannedgiving.thearcsf.org
plannedgiving.thefutureofhealthcare.org
plannedgiving.thomasu.edu
plannedgiving.txaglandtrust.org
plannedgiving.uconn.edu
plannedgiving.ucsb.edu
plannedgiving.ulpgh.org
plannedgiving.umbwmc.org
plannedgiving.unt.edu
plannedgiving.uua.org
plannedgiving.vnacarenewengland.org
plannedgiving.vwu.edu
plannedgiving.walsh.edu
plannedgiving.waterforpeople.org
plannedgiving.williamson.edu
plannedgiving.wlc.edu
plannedgiving.wlrn.org
plannedgiving.womans.org
plannedgiving.wqed.org
plannedgiving.ywca.org
securedns3.planmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns3.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEZXXk6DBSEz/lqFipaz
Lmidc/GL/txBgLM6x8gjzpnQN++xIZqN4H/tDz22kc1lYBioJUoINGDgdWwiAf1q
t+YsN8m7r5m9m95uq/fLcL/SfRxyD75igO7yW1GcP30Rr1KpTSNY7Jj/EY79n019
Xm1VjEu22evZ5Eq0epWRwImvrqdj1F/2ump4pAjdgI3i4/stZRIoArhGF2SNxsty
jEgbmT4IFl14THx5qn5rYOkrjcTWGxc97+c8YFzFZrI4UV071ovL8lrXP/j74Zbx
K3q/bFxLRhPYgAcX1ruySGaOtyXLwUPtzB4PLVIrHdpZAdkIK0cND0tuMbY/Xfdv
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327848897760474895975070986268529787259670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 15:42:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 15:42:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns3.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22757581473203971718746575327980383256599670834557106328950096032462464673626121187051311053539438345682857676283119133088436387548282419028853027285467867623862939746918110135571445651768996785854494971525996752877417586578172624998838198238543175302619016442693510500801696010439468710535678669243008324597964463431482835498464805448514140059258821170371104345947815651700988679724737675601865481268600017073948822362862817164162001790328976855982731739328594644506361338374039353353159246658726225886961282509059169636795963258726099037104626469206272396768497849349192959976873843051609542352154875506968667582281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							538387dc8d60902b6baf5e9f0ab5bcaa938b4a89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2662 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.radyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.villanova.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.crisiscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.ascefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ridgeviewmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.morris.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.uwf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bannerhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caldwell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caramoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreybalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.culinary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edwardfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fasterfarther.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fortlewis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.geron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hheonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsutx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idyllwildarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.innovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.jbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kentri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kiddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kzoo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lagrangesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.latinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.macomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mannafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maryvale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcgeheeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.morehouse.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msffoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.newmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nycballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ollusa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ozarks.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rosemont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rpbusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.salk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sbschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishritehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.semesteratsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sfhscollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sinclair.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjudemedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stmarysdominican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stolaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stpiusx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thearcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thefutureofhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thomasu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.txaglandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ulpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.unt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnacarenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walsh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.williamson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ywca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns3.planmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184a037fe2e000004030047304502202c6e1dc4be4efbbbb8670b7e1c1cc02038df82b6bd1de9ad379c530b65c2e8fe022100f4769e1d0c8bc548408381577917e5372ceaa604773ccfdf03d791a7e45a6761007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184a0380023000004030046304402201fbd7039556c1d2e283da4c9d905f427d4d6e7b31e3ecf3365d05b5173254adf022053ac5aa41090794601c3b6e144d9d2f5cd4e01feee5c11bb1f7dede170f9cf32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088d081350422e7560503577ff4b708aa1ff1ac4f58cc4a74cbe3b4a531e5ff4125d76820caf24333aebf47286b8c8ff249c677114134e224ab5662a26ec827950f0155f5823c9914d4f37c60d81ae4995f1d7615f182366f4b422667e69eb679264fd27260d4357ed965172e77621e9c4ecfcc30f5e3f67084de417fbb4c1e91f790904982e5197de7dcfa0843eaf7eb1e9f9f87a38580e5eb76f6523f1b824b42bdbde07e8a77fb06c913d97e1c238694fac8b1173303ebead29120fb8c8945e2f284ead4ef4c940b78296eb29cd952bf4ca984906acb7f3fb95ad01846af3e412f11df6f8266de6b0b3ccc575bf22ef6afe66ee5cb7e40e5ba27b5fb2162bb