*.givegab.com

- Givegab, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7f:d7:84:81:de:8c:33:e7:61:46:e8:3c was issued on by GlobalSign nv-sa.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Givegab, Inc.

Organization: Givegab, Inc.
State / Province: NY
Locality: Ithaca
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7f:d7:84:81:de:8c:33:e7:61:46:e8:3c
Serial Number (int): 39565141046569942744331380796
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 0c:8f:f4:d0:02:8c:62:29:18:75:de:67:8b:38:bb:6e:28:85:1c:b0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): d4:75:e8:5e:d7:b5:3d:29:fe:2a:3b:3e:a7:f6:71:82:63:2b:8f:2f
Fingerprint (sha256): 14:db:3e:2d:0d:20:68:75:b3:79:72:84:f9:d0:c0:2b:9c:c8:ed:84:f3:54:4b:b1:29:b6:74:6c:79:d2:93:e3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate *.givegab.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.givegab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.givegab.com
*.canisiusgivingday.com
*.elpasogivingday.org
*.springiton.org
dayofgiving.rochester.edu
domore24delaware.com
es.givebigkern.org
es.thebiggivesa.org
extragive.org
give-more-24.org
giveforgoodlouisville.org
givelocallouisville.org
giving.inn.org
givingday.cornell.edu
givingday.vanderbilt.edu
givingisgorges.org
*.givingisgorges.org
texomagives.org
thegreatgive.org
user-content.givegab-cdn.com
wegivecatholic.org
www.bigdgives.org
www.brooklyngives.org
www.cunytuesday.org
www.domore24delaware.com
www.domore24racine.org
www.extragive.org
www.flatheadgives.org
www.flatheadgiving.org
www.givebigchq.org
www.givebiggv.org
www.givebigkern.org
www.givebigpittsburgh.com
www.givedekalbcounty.org
www.giveforgoodlouisville.org
www.givelocallouisville.org
www.givemore24.org
www.givenday.org
www.giving-day.org
www.givingday.cornell.edu
www.givingisgorges.org
www.greaterhelenagives.org
www.greatgiveflorida.org
www.horizonsgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.kygives.org
www.missoulagives.org
www.mtgives.org
www.newsmatch.org
www.nhgives.org
www.nvbiggive.org
www.nygivesday.org
www.oregoniansgive.org
www.spring2action.org
www.texomagives.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.thegreatgive.org
www.thespringshare.org
www.valley-gives.org
www.vermontgives.org
www.wegivecatholic.org
www.yellowstonegives.org
givegab.com

Other certificates including the domain name givegab.com

(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net

Certificate

The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXJkGXpbUR8H9FZ//7l
gx+UxaE3ndDcVJ5QeCPpdhM/NDmG4WaWmiDXh/vqm9kiBWdiYNJtxaVTNQyl+p7z
p1JlrlzqxIlvQFuRhitwpiWudIW8EjNZAIcG4IK3unNu19BNEvo1blJ+IlP6Pu9Q
MqpiKBiUsf1YiJst5lIth+QUnmLzwPEJfp1zmwfIBh/CTmbDawlBK0FdsKEXCp2U
FpHagjxKmPP8DwPIYJK00CD59qwJzxVSmaoV2yfGX8Nyjc9KqxrP2xRPqKiLvT5j
uum0g4V1l6cAjp/bQQHDFQQyx5gEXumMdfwu50KU0YrlPgB34K4j4jF8nh0MHEEh
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39565141046569942744331380796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 17:22:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 14:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20800614596536580274010047047173259417941961024304627786367386388498018839251916901688707088259446690192886226539839452969911865526793391818551035480154388240409132130466017893873202060734038519157933024551291722225008032645508996682171352826941752553420364018552965614921737160510569673885412020177984965229563517038086170834240889652069811574050616739481994160009304182480002953968281354982540795366208797289512214613808127704048976426121878327129495622398104446738946371111059353171231654836489748115633629109087558015518019911709882170477876511713293731413060890030766754003669839439278209299204517822532639859041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1467 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-more-24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.inn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.vanderbilt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyngives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24racine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigchq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givenday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving-day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterhelenagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatgiveflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missoulagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbiggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring2action.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespringshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valley-gives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowstonegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8ff4d0028c62291875de678b38bb6e28851cb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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