securedns1.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:90:64:92:c0:24:e9:94:6a:76:a4:6e:7d:d5:ac:24:2d:74 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:64:92:c0:24:e9:94:6a:76:a4:6e:7d:d5:ac:24:2d:74
Serial Number (int): 397583489335723110180049013087074378853748
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:3c:14:37:b8:d3:fd:e5:72:99:7c:1b:a4:e5:6d:a3:aa:0b:46:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:38:95:af:19:2d:fa:b2:15:35:16:dc:7d:fa:b8:85:24:7e:37:67
Fingerprint (sha256): 36:d2:c0:c0:4b:5b:50:b5:4e:21:99:b6:ca:d5:2f:aa:e4:b4:42:2e:3d:fc:27:96:04:27:c0:e6:49:c0:e9:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns1.planmygift.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.amcpfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
llulegacy.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacy.utmb.edu
mylegacygift.wmualumni.org
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.assumption.edu
plannedgiving.atlantasymphony.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.bsomusic.org
plannedgiving.calpoly.edu
plannedgiving.cancersupportcommunity.org
plannedgiving.cazenovia.edu
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desertaidsproject.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.eden2.org
plannedgiving.epilepsy.com
plannedgiving.facs.org
plannedgiving.focushope.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.grinnell.edu
plannedgiving.guidedogsofamerica.org
plannedgiving.hf.org
plannedgiving.high.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.lehigh.edu
plannedgiving.metopera.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.uso.org
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.llulegacy.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmks21m8J9pkhwY2BYkS
YrX2j1DhM0KG9gg2MLmEfwWRXCHeLWZaXWoaxOtaDZwbq1ttkL71zRPAUT1sFTTV
4YfwyddIvPlQeIZsOJgvpEcvuCZBbcGujwek71qjKYXqIXfLb8HUBK1Dx/dAtJPf
UeKnF6pfgNriQLI10FVWNGYYsQQ02p4PYFhms4GGfkPA2Wd+wMN3z6jk4b48qT17
/ehWrVHiv8/wQ5Q86RAh511QELapLd8Wv0val+Kn8S9ux7sW68QSAzgL2UvV7UvS
tQxh5Mygdu5L+HH/U4vebJxcVECDU6BRJVVV+9MDHhB7fm59Rhe1vFPBkeP9SW1j
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397583489335723110180049013087074378853748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-07 00:42:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-08 00:42:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24542094998386725208941482873797049212068548619381714639654688204155109937140749223340654489675981907109826432357695628193846635398608883386034280439861104386942153799879444544681533669164106905248486281048763466123954462521105998662212673603284722798468013242101162660409748506662162291310241568554092510049594360687373138839062194687868628894162909281736853314455955311086904547100476241895741151147384489124624278679773325438322739519187814802508488584231289760966060877171113688903348987075235773469535249228801568437628210936080588585724814020408422882829663209208979753675916204120235222951746348947508034364317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							413c1437b8d3fde572997c1ba4e56da3aa0b4604
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.amcpfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utmb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bsomusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desertaidsproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.epilepsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.grinnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lehigh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001777a2799490000040300473045022100d14088b870605e264275e0951dda29870ecc92e0189edba0b77ee383ed2f6a0902205c39956cbc4234835384274258d2bb3979bf7dcf8ae8cfdf44a5c0dffe4ca44c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001777a2799e30000040300483046022100eea48cb189e934d753349a255cf1c77e8b8c9c619a5d6d14a067fb76f5c0120f022100ff4bea0664ca273d6220c5405a6b2ca268cf1da094405e03683d15f8e0507bd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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