securedns.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:0a:18:52:50:b4:a9:26:26:03:bd:47:bd:f5:d7:db:85:dd was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:18:52:50:b4:a9:26:26:03:bd:47:bd:f5:d7:db:85:dd
Serial Number (int): 264772010341637549041381748467330281342429
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:8e:68:58:f0:c6:07:45:0a:57:75:8d:ac:7e:a4:2d:c9:1f:4f:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:cc:f2:46:e9:94:4c:f8:ad:ec:2d:a7:59:05:a8:12:5e:10:20:1d
Fingerprint (sha256): 1a:f7:a8:d2:29:ef:3f:62:0e:d3:67:87:6b:34:a5:bd:34:6f:33:57:ca:f2:21:e5:95:e8:52:19:f9:4a:cd:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns.planmygift.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catholiclegacy.org
foundation.stpaulsmobile.net
giftandestateplanning.jburroughs.org
giftplanning.cu.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.umd.edu
giftplanning.utc.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
jcf.jewishpalmbeach.org
legacy.chicagosfoodbank.org
legacy.hsi.org
legacy.humanesociety.org
legacy.rmhcsd.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
letstalk.stelter.com
mogp.mtcf.org
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.mywmu.com
mylegacygift.unitedwayoc.org
myplannedgift.strazcenter.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.texasbaptists.org
planmylegacy.ymcafw.org
plannedgiving.abwe.org
plannedgiving.archgh.org
plannedgiving.archny.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.central.edu
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.drake.edu
plannedgiving.edf.org
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hli.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.mybwmc.org
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.okeeffemuseum.org
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sandiego.edu
plannedgiving.sdhumane.org
plannedgiving.sja1890.org
plannedgiving.sjcny.edu
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.transforminglives.org
plannedgiving.twu.edu
plannedgiving.ua.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
shcgiftplanning.org
thewlhsfoundation.org
utdallasgiving.org
www.catholiclegacy.org
www.rmhcpghome.org
www.shcgiftplanning.org
www.utdallasgiving.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHb/wnMrbWdfnL7Y4Abp
8acygQFRnalklg2riRA4gYOqBwdoNI9HDsAA5UjankOR4CJtYmkV3e/xiqp3ZypD
pMFaTGt0vt4MvttBT0gaKKGQmqOpSk43pVeu8UpAauEkfAsaCnDMyymFLnXa2+g7
iDuy2r6W55yq8MzWPsd6KWstYotYMnQpE/yckxgla2/2O8rf5x044WVwisXZK/UM
iaiKfZLTkYTmQdYefN9CDdZDi44KXnzQKYMGCI5kc4n2Y1tQ9w8oiWwJtgeRaFSa
1uO61g6IyPRGtrEWuYouWMux6BRHxvaLzRXU/WjDZ0cz7G009p9hYFvEOsCNrf5C
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264772010341637549041381748467330281342429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 17:57:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 17:57:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21771669078109094016033139468037788053404991797912611235442478863457346471631138854726729048940446927149975326956190012492752380562092223020521895715372798888889934426207226317400120136720350471180364731219697891250953455455782067770621064671659280583111567573253141026315808064384617141351005324572173735007815082053808035264557410100743745591759187389872308434587295670351430733454609943696833577896055735014600186114283129457798260832882640608847918596717097387871330705779121021594843441921622143808852881403964867127283928100709598968830396331184679842420766645640458097280748895211155634732168828218907484373567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d8e6858f0c607450a57758dac7ea42dc91f4ff1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2537 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.stpaulsmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcf.jewishpalmbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chicagosfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.rmhcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalk.stelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mogp.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.mywmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.strazcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.texasbaptists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abwe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.central.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.drake.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mybwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.okeeffemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sandiego.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.twu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ua.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewlhsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdallasgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdallasgiving.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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