securedns.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:d3:73:a8:01:38:a1:5c:e7:48:92:12:54:15:3c:38:b4 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:d3:73:a8:01:38:a1:5c:e7:48:92:12:54:15:3c:38:b4
Serial Number (int): 345667670053543456982011203247223162550452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:0c:d3:20:e0:f2:52:3f:0e:44:dd:8f:46:e3:a5:16:c7:d5:ba:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:e5:1a:4e:c2:f9:f9:f8:bf:ff:e9:9b:a3:3d:e7:99:73:49:c8:d8
Fingerprint (sha256): 39:cb:bb:e4:67:7c:a2:72:05:81:32:59:2e:51:a0:7b:af:b2:93:a8:70:09:ad:17:04:4e:de:50:c5:38:e5:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns.planmygift.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beachlegacy.org
catholiclegacy.org
foundation.stpaulsmobile.net
giftandestateplanning.jburroughs.org
giftplanning.cu.edu
giftplanning.denison.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.umd.edu
giftplanning.ursinus.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
jcf.jewishpalmbeach.org
legacy.ccsfoundation.org
legacy.chicagosfoodbank.org
legacy.hsi.org
legacy.humanesociety.org
legacy.rmhcsd.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
letstalk.stelter.com
lsuhealthgiving.org
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.mywmu.com
mylegacygift.unitedwayoc.org
myplannedgift.providence.org
myplannedgift.strazcenter.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.ymcafw.org
plannedgifts.providence.org
plannedgiving.archgh.org
plannedgiving.archny.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.carenewengland.org
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.central.edu
plannedgiving.cfswia.org
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.drake.edu
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sdhumane.org
plannedgiving.sja1890.org
plannedgiving.sjcny.edu
plannedgiving.stcharlesprep.org
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellfoundation.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.transforminglives.org
plannedgiving.twu.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
shcgiftplanning.org
utdallasgiving.org
www.catholiclegacy.org
www.rmhcpghome.org
www.shcgiftplanning.org
www.utdallasgiving.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuOvIsql0RGYEtV6h45h
UzvAkSFhKyV+Iucel0W1tRNzNtQzDgGSPIPgofBF2lYqjbNihg7ZmXayUdjbwbYn
jwhtGqbJpdmb1S905Br3T1o8EWmpwx68rb3bRN+0FSY7wnhEdf0r9/67M1XTC9YB
nP/xXdIhy//CDVd62QNEBNZFH5OaydvCh6HbB9Bh6lRGA7k6cqqrfPIr2nUOOUJk
BfBPTAjLRD1KAjgL+Tfpkkw0cY1WO65WJY/xlmq4mXuzNKj1PjMa+DVGEZcI3Qy5
U32H+vzyiS6LGT62PH/PAMZQA6IxdcgZNMwxQWqz9+tbVwZWrWmtPZ8IHMM/JjUP
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345667670053543456982011203247223162550452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 20:28:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 20:28:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18038114531589174874642204451316873453744458440138053689062344576684631302311314120246122514844171544740941348531827324940188608475159511077502221709796207485456888535347676772772452900903095612337434945706375105908120540405573254920150585812585843217389759900009226218097025331973469511761270621468802706955555090531999480316345775433461935489072377444986700373674304446129580164563922693890798109289064305898986819670220167339178109592101484745002341679886069348202649432923534879710818466052749290978683803064159701550523965874839839485822127236608668386377696001507795369747965794318402068686686160526530634387301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							460cd320e0f2523f0e44dd8f46e3a516c7d5baec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2613 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.stpaulsmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.denison.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ursinus.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcf.jewishpalmbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chicagosfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.rmhcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalk.stelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuhealthgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.mywmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.strazcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.carenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.central.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.drake.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stcharlesprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.twu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdallasgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdallasgiving.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1e79531a000004030046304402207857af266e26e5eafe5eb6b362561d70038327247b4d965f038e70659e6df287022011ffeeab6051344188a9e95e208ef1ffac86b65d51771b5cd3baca1279d6350b00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1e79536f000004030046304402206b2ede1fad71292dca8a9ca979749f276769140d826f953fa903c0737f90731e0220743b5bfaa45d89cedfde87118265e6880ff020ebcac10af2d9e53456c6da1d12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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