*.givegab.com

- Givegab, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5c:8e:03:ac:00:80:52:64:5f:82:21:0a was issued on by GlobalSign nv-sa.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Givegab, Inc.

Organization: Givegab, Inc.
State / Province: NY
Locality: Ithaca
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:8e:03:ac:00:80:52:64:5f:82:21:0a
Serial Number (int): 28644305709924572340538188042
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 0c:8f:f4:d0:02:8c:62:29:18:75:de:67:8b:38:bb:6e:28:85:1c:b0
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 5a:a3:b8:4e:5e:93:6e:4f:11:57:1f:4d:40:cb:21:22:95:06:ab:b7
Fingerprint (sha256): 1e:a1:15:dd:f3:7e:74:51:bb:04:e7:47:fa:51:fb:06:d5:f8:01:e9:15:2c:91:91:15:00:b7:82:df:10:4a:3e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate *.givegab.com

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.givegab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.givegab.com
*.canisiusgivingday.com
*.enterprise.givegab.com
*.igivecatholic.org
*.springiton.org
amplifyatx.ilivehereigivehere.org
amplifyatx.org
avenuesforhope.org
biggivehouston.org
dayofgiving.rochester.edu
domore24delaware.com
dteholiday.org
elpasogivingday.org
embraceastream.org
es.givebigkern.org
es.thebiggivesa.org
extragive.org
fcgives.org
give-more-24.org
givebiggreenbay.org
giveday.luthersem.edu
giveforgoodlouisville.org
givelocallouisville.org
givelocalyork.org
givemore24.org
givewhereyoulivecollier.org
giving.inn.org
givingday.cornell.edu
givingday.umd.edu
givingday.vanderbilt.edu
givingisgorges.org
*.givingisgorges.org
igivecatholic.org
newsmatch.org
steps4students.org
telluridegives.org
texomagives.org
thegreatgive.org
user-content.givegab-cdn.com
wegivecatholic.org
wgtedayofgiving.org
www.amplifyatx.org
www.avenuesforhope.org
www.bigdgives.org
www.biggivehouston.org
www.brooklyngives.org
www.cunytuesday.org
www.domore24delaware.com
www.domore24racine.org
www.dteholiday.org
www.elpasogivingday.org
www.embraceastream.org
www.extragive.org
www.fcgives.org
www.flatheadgives.org
www.flatheadgiving.org
www.givebigchq.org
www.givebigdfw.org
www.givebiggreenbay.org
www.givebiggv.org
www.givebigkern.org
www.givebigpittsburgh.com
www.givedekalbcounty.org
www.giveforgoodlouisville.org
www.givelocallouisville.org
www.givelocalyork.org
www.givemore24.org
www.givenday.org
www.givewhereyoulivecollier.org
www.giving-day.org
www.givingday.cornell.edu
www.givingisgorges.org
www.greaterhelenagives.org
www.greatgiveflorida.org
www.horizonsgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.iowa4hgivingday.org
www.kygives.org
www.missoulagives.org
www.mtgives.org
www.newsmatch.org
www.nhgives.org
www.nvbiggive.org
www.nygivesday.org
www.oregoniansgive.org
www.spring2action.org
www.steps4students.org
www.telluridegives.org
www.texomagives.org
www.tggce.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.thegreatgive.org
www.thespringshare.org
www.vermontgives.org
www.wegivecatholic.org
www.wgtedayofgiving.org
www.yellowstonegives.org
givegab.com

Other certificates including the domain name givegab.com

(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net

Certificate

The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXJkGXpbUR8H9FZ//7l
gx+UxaE3ndDcVJ5QeCPpdhM/NDmG4WaWmiDXh/vqm9kiBWdiYNJtxaVTNQyl+p7z
p1JlrlzqxIlvQFuRhitwpiWudIW8EjNZAIcG4IK3unNu19BNEvo1blJ+IlP6Pu9Q
MqpiKBiUsf1YiJst5lIth+QUnmLzwPEJfp1zmwfIBh/CTmbDawlBK0FdsKEXCp2U
FpHagjxKmPP8DwPIYJK00CD59qwJzxVSmaoV2yfGX8Nyjc9KqxrP2xRPqKiLvT5j
uum0g4V1l6cAjp/bQQHDFQQyx5gEXumMdfwu50KU0YrlPgB34K4j4jF8nh0MHEEh
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28644305709924572340538188042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 18:11:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 23:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20800614596536580274010047047173259417941961024304627786367386388498018839251916901688707088259446690192886226539839452969911865526793391818551035480154388240409132130466017893873202060734038519157933024551291722225008032645508996682171352826941752553420364018552965614921737160510569673885412020177984965229563517038086170834240889652069811574050616739481994160009304182480002953968281354982540795366208797289512214613808127704048976426121878327129495622398104446738946371111059353171231654836489748115633629109087558015518019911709882170477876511713293731413060890030766754003669839439278209299204517822532639859041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enterprise.givegab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.ilivehereigivehere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avenuesforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dteholiday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embraceastream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-more-24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveday.luthersem.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.inn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingday.vanderbilt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telluridegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgtedayofgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amplifyatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avenuesforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigdgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biggivehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyngives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24delaware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domore24racine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dteholiday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elpasogivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraceastream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatheadgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigchq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigdfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggreenbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebiggv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveforgoodlouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocallouisville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givelocalyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givemore24.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givenday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givewhereyoulivecollier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving-day.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingday.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greaterhelenagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatgiveflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowa4hgivingday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missoulagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsmatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvbiggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring2action.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steps4students.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telluridegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texomagives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tggce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegreatgive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thespringshare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wegivecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wgtedayofgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowstonegives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8ff4d0028c62291875de678b38bb6e28851cb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167c283dbe20000040300473045022100f82261903638f597d827c4691bb902916ff9b7b8e240ce3687fa8d4abfc13719022027041bc566b9c3092e5f7e0c2eb2a2d9082a0ec8dbf0e51c9d02b47e8b85e439007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167c283d92a0000040300473045022100a1d1016a073a9d201720daeec89a9ccf7fcb43c1af6d5d0caea3ca311cef137c0220084b6cdeb59c4c2e940cd217da2af40e5a70249cbc81303b7e8d44fd78bc5270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f4ef6eac894a85d1f610d3710b11f649de7d508f5ad5e67897e9b132f4cf4f4e722f9487055411347dffbc320cbb8f6eec03434d5c91f6c9c756b42cd1dcfc4a4c016534c215e94f0e01f3f52b4194cf8d5ae261141f72b3c261efe1f3c96b578fa1ce003f5b75904cdf8d7a130f373784e7ec0b76834cafc2bdec06a13c8f2ff441591c271ac265507aa333b1a82379a318685f6c22c7e6e33d92be6099f7b9b38e26aae9f2a939f52207d2cf915ff5c2ddd58c3d05e06caa9c8fccf55e249b510d0465084e4a6ba19df1f9fa90f68b282f1d08b60f2f6a696cf00a6bdccb0fff68e64828ccad6b319d3c3a1264069894a5a1cfba050c751b3dbd16ab2d08f