securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:70:28:88:f6:10:ae:e0:a2:0f:85:4c:31:40:a5:85:c8:95 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:28:88:f6:10:ae:e0:a2:0f:85:4c:31:40:a5:85:c8:95
Serial Number (int): 386614649085184786920808524376061608577173
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:2f:48:a1:83:b3:85:18:a3:ac:c0:9e:1f:28:bf:ea:87:98:d4:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:8a:9c:e3:ae:4b:55:50:40:da:f3:4f:f3:78:1a:bf:a0:c3:63:e2
Fingerprint (sha256): 18:cc:f8:c7:2d:9e:e5:cf:4a:2e:5a:8b:33:e2:94:59:c1:8a:ec:f2:19:d3:30:39:1c:d3:61:b9:07:c0:4b:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caresfuture.org
davplanmygift.org
divinity.duke.myplannedgift.org
eastersealspghub.org
evergladeslegacy.org
foodbankpg.org
foundation.convoyofhope.org
foundation.elca.org
founderssociety.abi.org
giftplanning.andover.edu
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
health.usf.planmylegacy.org
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacygiving.sfopera.com
mipgc-conference.com
msomusicallegacy.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmygift.supportuw.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.arcmh.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.chesapeakeconservancy.org
plannedgiving.childrensal.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.dom.edu
plannedgiving.fenwickfalcons.org
plannedgiving.galvbay.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.kera.org
plannedgiving.maineaudubon.org
plannedgiving.miamijewishhealth.org
plannedgiving.mnopera.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.ppoh.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.sjny.edu
plannedgiving.slu.edu
plannedgiving.trinity.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.umassmed.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.uwp.edu
plannedgiving.valleyymca.org
plannedgiving.vermontpublic.org
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.walnuthillseagles.com
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
www.eastersealspghub.org
www.foodbankpg.org
www.mipgc-conference.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF5CKXljnMyVCuiFpMYr
9UGvRQKJ+T8yL6RSLEFOjO8dpa4OL1kQJJ6lvdx8oHUH54yy+WudH4ptWVhDXtE5
mZIHLHMrL5l9x/zIkTIjTTWWNW3ak1//jMogDJKRvjAG+pAp0SZZuL+I2lde30XT
TUi9KHPwwZr5zA5yzxS7sg1A9j7xZI181VhIdvP1pFOD9CsioEXhGourH/FneK1p
8KPw8r/yP4vdHt0HuX4U5RMxrebW63tQun430DK9gtISSdooAwnE/PYr2gojfZ1D
DYM5GENP1ACDvjmkZV3HNgmUx5PkfedwlhkLgGqjawDSN/i+TvpponoSiK/ESUcu
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386614649085184786920808524376061608577173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 22:20:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 22:20:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19234702926595511585768224234580611625347112822204464496311688971573078466453217451695467426446546603934695854753762034288513070183767327317542457710345554912874832246859775446264277459028425888469303013349967591146049034576043718275662564300617871325198236927872831269352492893876770035801095701358543244355603276100128994284185800591626515897008710444554816533754819250824731904381974428029249391603245082343604171621286708343349894032837576267455933733041475169097894950922023568713626760440493681722928379570933578720532539455018473443686753716685220448357022924366781026861268640170093469295470242259402815385271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f62f48a183b38518a3acc09e1f28bfea8798d450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2843 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergladeslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.convoyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.elca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.andover.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.usf.planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipgc-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msomusicallegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.supportuw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arcmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chesapeakeconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.galvbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.miamijewishhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ppoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.trinity.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umassmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uwp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.valleyymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vermontpublic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walnuthillseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mipgc-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf086daec0000040300463044022073ab79ea0d7f26c980cb4e25a05c0bdb5af021509fd2e4261c4058b1c4659bdf02204e9086c025cb683f320a66f099ad13428b4840d7ac636d5c0b9f0ceb230dbf30007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf086daf500000403004730450221008077e66bed7950aee0956ea8c336a62683d9226edf38a9797fad5f8394de2aaf02204ac9e1af52530fca4b26bb9f717682c7fee299a82d19c77f9a1a4481a64a4115
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a281c7b4f2c5447c4c72ba3248f9e8d72b974f92f2df80d256fc829aa458fb54585b0d3272628985d99f3596a5424766bdd0d6e251c22a44c2597c4a8fcc4018269ca01684a976701b875fd8e881ddafd8f522e1af894b06d69a43ffcbe15d7a6828c6e4e04c4bf1c11f19b884d3b56748d69e04db1df8d079928de16fdeb9430bbc529e7277d7d28a3b75dafb45577d3c9cbdb967950cc02c4b345f52dac69e359893d6baca124464777fad6d0fdfd7694ccda80eeaeee89b0bb0079f308b9b8e7524811d8c9b0de23b6f93173fec04e1474a6fdfcd37daf5509d66ff4d3ee73e4d3815cd9b11cc37870ffee1db7f91247d5c8a44211e6cb4d1e47e39a2a102