*.givegab.com

- Givegab, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 22:85:12:06:cb:f5:61:8e:f3:54:dc:49 was issued on by GlobalSign nv-sa.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Givegab, Inc.

Organization: Givegab, Inc.
State / Province: NY
Locality: Ithaca
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:85:12:06:cb:f5:61:8e:f3:54:dc:49
Serial Number (int): 10683362595908394338338790473
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 03:d7:40:5f:ce:47:96:b7:c3:16:62:82:38:03:8c:52:e1:68:be:57
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 10:ed:ae:2e:ec:b4:43:90:16:36:b0:90:72:85:74:81:63:d3:23:1b
Fingerprint (sha256): 0e:37:6e:7d:3e:06:cd:32:82:0d:ec:5a:d7:09:18:5f:51:15:aa:07:32:ce:23:88:95:67:d6:71:8b:69:87:dd

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate *.givegab.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.givegab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.givegab.com
*.canisiusgivingday.com
*.springiton.org
dayofgiving.rochester.edu
domore24delaware.com
es.givebigkern.org
es.thebiggivesa.org
giveforgoodlouisville.org
givelocallouisville.org
giving.inn.org
givingday.cornell.edu
givingday.vanderbilt.edu
givingisgorges.org
*.givingisgorges.org
thegreatgive.org
user-content.givegab-cdn.com
wegivecatholic.org
www.bigdgives.org
www.brooklyngives.org
www.cunytuesday.org
www.domore24delaware.com
www.domore24racine.org
www.flatheadgives.org
www.flatheadgiving.org
www.givebigchq.org
www.givebiggv.org
www.givebigkern.org
www.givebigpittsburgh.com
www.givedekalbcounty.org
www.giveforgoodlouisville.org
www.givelocallouisville.org
www.givemore24.org
www.givenday.org
www.givingday.cornell.edu
www.givingisgorges.org
www.greaterhelenagives.org
www.greatgiveflorida.org
www.horizonsgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.kygives.org
www.missoulagives.org
www.mtgives.org
www.newsmatch.org
www.nhgives.org
www.nvbiggive.org
www.nygivesday.org
www.oregoniansgive.org
www.spring2action.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.thegreatgive.org
www.thespringshare.org
www.valley-gives.org
www.vermontgives.org
www.wegivecatholic.org
www.yellowstonegives.org
givegab.com

Other certificates including the domain name givegab.com

(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net

Certificate

The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sXuu/nBjByilANfnwmn
GzU/DNI0cVkZ1C3JJi6yhLEJwf+zm+jI/BT+lPMFsgz/uHR4VhZfl2tbHCWBCogR
Qrxe538qhz3Ni4BtU0mmSD7RgTXOOiMLbHWS+KhGVfkJqLs8Itzu39sHcb05VTcm
2RrHkcgOb2MrUcTaz52esKLZB6aKdU/ZLKuO9w/5yEFUVhBE43QBKob2kjGKVG4F
iHPfhEKa8jL0rBSv3FJ37HK7zdrruTmtMN49tnYYTN/mubcGIhrKKlAk04dWKeyP
/u4jDyO1uOTSA4Dg+GVUIO4A3GNmW8yX35HqkvRArEyvbKR/5M+C54K0xPqbxQw3
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10683362595908394338338790473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 18:36:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 14:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30142320762934800297786488225521567088103290856426898055296736464865313016096708950800818966647992460474878806036050237038288397486091911145825480238031081978826088143231231795111361587614934689167575891392362842503416403709718748484634090717195373439729909004837806780851450606275042365122503494826638426001302998685254786582060315776664980263581159047568204709348503249124969869009563230316616311801640149851974504227345801056464841389824513064812841039173549212881758425423637457517036681547684341097374234545137930362300032276455021020711999619287664880421328114625964034094835344858996491261614392252454270679029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1334 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.inn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.vanderbilt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyngives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24racine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigchq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givenday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterhelenagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatgiveflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missoulagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbiggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring2action.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespringshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valley-gives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowstonegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03d7405fce4796b7c316628238038c52e168be57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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