securedns.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:71:55:b3:68:f9:fe:87:07:4f:a7:fc:e7:26:bd:c9:a1:0c was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:55:b3:68:f9:fe:87:07:4f:a7:fc:e7:26:bd:c9:a1:0c
Serial Number (int): 299902681187303365572407136446018426085644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:00:98:4b:18:5f:f5:24:a0:2a:5e:27:e1:a3:59:3b:9f:56:2c:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:76:36:78:3c:79:85:91:73:e0:ec:92:e5:77:5b:3c:bf:04:d1:2e
Fingerprint (sha256): 34:b9:de:1f:67:c6:be:17:b3:41:29:6a:cb:81:9c:f1:ed:75:2c:09:a9:75:8c:12:15:d7:1a:2a:2a:71:bd:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns.planmygift.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catholiclegacy.org
foundation.stpaulsmobile.net
giftandestateplanning.jburroughs.org
giftplanning.cu.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.umd.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
jcf.jewishpalmbeach.org
legacy.ccsfoundation.org
legacy.chicagosfoodbank.org
legacy.hsi.org
legacy.humanesociety.org
legacy.rmhcsd.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
letstalk.stelter.com
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.mywmu.com
mylegacygift.unitedwayoc.org
myplannedgift.strazcenter.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.texasbaptists.org
planmylegacy.ymcafw.org
plannedgifts.providence.org
plannedgiving.archgh.org
plannedgiving.archny.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.central.edu
plannedgiving.cfswia.org
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.drake.edu
plannedgiving.edf.org
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hli.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.mybwmc.org
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sandiego.edu
plannedgiving.sdhumane.org
plannedgiving.sja1890.org
plannedgiving.sjcny.edu
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellfoundation.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.transforminglives.org
plannedgiving.twu.edu
plannedgiving.ua.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
shcgiftplanning.org
utdallasgiving.org
www.catholiclegacy.org
www.rmhcpghome.org
www.shcgiftplanning.org
www.utdallasgiving.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuIR7IyvAu6zkXXPkKH3
7YNCPtxKGEBKKdZZRAqm9viQ85ma+Mdh+y7mFQ3ubmhhGyeRKZCi60A+RUrhvuO2
AB6DzpJfEPBocGUTcIgUxvUXJQjycLf9hoYYtNERqO8X8H9GVh4lwx3Le6bm5hGM
1aUjqWmgeXyHgQviSBZeTwszPCxk83Bz8aau/ezYo1cL7RKepl0VyHCMKusPdvh5
g5IANC0elL6bpr+ZQJ3r4FqAYKt49ya37EQH8RMkImEJHfDyD2GFoMoB2B2xge34
+9/LUSfsmgmbXjIZ1c+R8lQ56lZDes0NZq/Su1byGbxMkyngq81XxwLvz0veaL5T
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299902681187303365572407136446018426085644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 16:55:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-22 16:55:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25106663662915670883246606880362011259680486382030339189523662604593915425952466832979760860362549438959520866736949309699783696097725682384420518349420110578178171497570818412394693283123884817543164844423636260890752610608233098914485145055145477439317259140985971606921553728936883768112002966530648509309151573005750845933171753029506036607704891418055209380688428587673531997169170974673754732040867869300685079157427522712488492413241403860059179089414038251173917968051466327596862869085969033003698381455551226422715899150174786709942604299128681207176330289059239900119653199824475861138829476078786906575677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6200984b185ff524a02a5e27e1a3593b9f562c6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.stpaulsmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcf.jewishpalmbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chicagosfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.rmhcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalk.stelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.mywmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.strazcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.texasbaptists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.central.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.drake.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mybwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sandiego.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.twu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ua.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdallasgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdallasgiving.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0017412c051f41e020e0506506e5f1d1344c8cc88d78bf1621d8dc6aea9848637069a307c6e2eaaf1336ab689ee84c6c6d503a7e8c25f64b4628485f3bef995d7f0a935c301e94ef8ac48e2f8b1ebddba82ff5f7c687e8ff7ac5d693a341527c5a9a7105643c2c90202cc6ab24a1753923fc4292b008d1f5c58b61d9dbe40e75be53172f99f910736372ea5800f7dee3935cafbc8d5c27fecc10747061e2938938f050a21442fe82207a7818a68e2611c717a0f8c410c1dd061085fde5c50fe47efdaace845c7dd627c4c7d9bfdf26cdd0d8e95bc2f906e45ab7f85ba35676c13fb22566f4e1c2267d1d0a973bb01d808354dee627418343bc0659131fe6167c6d