securedns1.planmygift.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:0a:78:ce:56:aa:12:0b:a8:65:72:a6:c8:79:34:c3:1f was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:0a:78:ce:56:aa:12:0b:a8:65:72:a6:c8:79:34:c3:1f
Serial Number (int): 291976190358788709585477491402280772354847
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:45:68:dc:49:7d:12:ba:81:9a:7d:07:f9:59:7a:5f:4a:50:fe:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:3f:cd:0e:39:a9:b4:e1:7f:0a:a8:69:fc:94:86:5c:dd:53:dc:f4
Fingerprint (sha256): 32:96:44:f5:27:f9:02:79:5a:ba:a5:83:e2:90:95:66:ce:27:a7:71:74:7f:3d:f3:33:48:43:b6:ad:9b:40:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate securedns1.planmygift.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.amcpfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
llulegacy.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacy.utmb.edu
mylegacygift.wmualumni.org
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.assumption.edu
plannedgiving.atlantasymphony.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.bsomusic.org
plannedgiving.calpoly.edu
plannedgiving.cancersupportcommunity.org
plannedgiving.cazenovia.edu
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desertaidsproject.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.dunnschool.org
plannedgiving.eden2.org
plannedgiving.epilepsy.com
plannedgiving.facs.org
plannedgiving.focushope.edu
plannedgiving.fredonia.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.grinnell.edu
plannedgiving.guidedogsofamerica.org
plannedgiving.hebff.org
plannedgiving.hf.org
plannedgiving.high.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.lehigh.edu
plannedgiving.metopera.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.uso.org
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.llulegacy.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmll/gj80M4oFPvDF8mvW
jGiqkePsjQfnOcAg6h9eNboP1wT4+HXUClWmyedu3Nq+V9S5OM/Nua7BITalG4mU
uNxIEZodXmN0ahP+wRgijKwKygAhYuc8427/xrOH3C0FLTbHU2j8N4QCPBMhdh+e
Z8uc74OUZK+G5/0WBq9lMUp7BzlJ/hsHWSJGy3+ei3zojZ9W2p5kNJsTTzxiI2pU
wvqLfBbW9b+y7VdTgCPk9Lz4sI6UANqu+GwDQIDnxlY6KdFZmNNcE/INCd2OddNx
GNvCBKll9F9cTiobI7CrPe6LGuhndgMA9sjtyWwSYUUFJ4uB3sNErOeUWzHBJTio
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291976190358788709585477491402280772354847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 18:26:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-16 18:26:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19484832113457914666931453566664085001756804002033823140916709729951606365996466616392194294614220865712105489946688585997888154888199089001790031794572149941009638864086991859803418034072026450075706374499149627711072280631236979041240525331766079146567215953992324427692414606036014944383651466907417102008132009464892442015073121893097914175621907868611381988133011124922971591092390418895664724121391502678486107664047526501365370816461127585690554330883538120612080026247534537122134405162385306796282636202735015827935902879643583647071597094855590945470975124576138721033490059304730811261154283651863150110787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc4568dc497d12ba819a7d07f9597a5f4a50fe2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2767 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.amcpfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utmb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bsomusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desertaidsproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dunnschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.epilepsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fredonia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.grinnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hebff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lehigh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000172c8e54cf9000004030046304402201f2a23abefd75d1701bfb2b8fd1abf4197fb275d6e77e44062d3dc3347ef7fdc02201b712714db3b37dc4494dc30f46637625b74c8463f99435563af5b7b290326d5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000172c8e54cdd000004030047304502207782becb914776da0324c206338ee8515fb2b446794fd03b1039cbf6094264ef022100c0614bacf522cdc6c153f62c795bfb661a69a9e6ecfe654c0b2b72a920b1bcf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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