securedns.planmygift.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:7a:35:c8:2b:d5:53:b8:89:9f:f6:54:13:73:69:fb:c6 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:7a:35:c8:2b:d5:53:b8:89:9f:f6:54:13:73:69:fb:c6
Serial Number (int): 335340576484298401831619153996635611724742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:67:08:0d:b4:b5:29:87:01:50:b9:10:3d:c7:97:9d:58:34:81:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:bd:89:e2:73:2e:b1:d4:84:d7:77:1b:cd:85:65:a0:d6:26:2c:78
Fingerprint (sha256): 41:e3:c5:d6:34:32:45:24:d7:1f:1d:2b:14:5a:ec:fc:da:37:c6:b8:38:cc:6d:11:18:d6:63:eb:c9:54:df:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate securedns.planmygift.org

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftandestateplanning.jburroughs.org
giftplanning.boisestate.edu
giftplanning.cu.edu
giftplanning.hope.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.utc.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
legacy.hsi.org
legacy.humanesociety.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
mogp.mtcf.org
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.unitedwayoc.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.texasbaptists.org
planmylegacy.ymcafw.org
plannedgiving.abwe.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.communitygiving.org
plannedgiving.compassionandchoices.org
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.edf.org
plannedgiving.fairfield.edu
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hli.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.lafoodbank.org
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.mybwmc.org
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.okeeffemuseum.org
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sandiego.edu
plannedgiving.sdhumane.org
plannedgiving.sjcny.edu
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.ua.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
thewlhsfoundation.org
www.rmhcpghome.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MRgsZQ8ltGH3yhdlrxH
KDk/LWyrgcmWP35oQtCKgSuLTmB/k97H45YkbNPAbAOWEmwJzREI2CIXbppQZfVV
BVUAeH6CGPrRKROc5LbpxDYHKbJABS36g5CCMPNzQ15+2ZlrdcLIlioiXfNcDkMy
dMn2M+BBnUcCG+heFocbpEueQYX8fvu0Ope7C2ydkhV8XYGNdnXNvkc7tjZVJG0E
FEn97BOaFA3NvzrF6/UCHXO2cBhtlYppfugVCveV+/by2MhKHd5AwaZJAxVOeRtB
Wm6UsgxsNhwCMFaeXVSiG/4GBe8i5Z8YikZGdKs5goXEpgzje6JqfpcfHZXq2Jom
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335340576484298401831619153996635611724742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 13:19:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 13:19:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27869264550338480104685153736472348433155189976869588483507836446696519522885147155487964627775197812589159255909806551286435138856123063768989213106816221170747640551888651034481105181602926818448243682419498287087224161283232878619849226036901515641248014297269760112905272595713897251545589390566541090369170251796211835933019999931026372741590394643184105877349870771956669712776000343904659286137038155802810129272167232354726661603221787217454049329907036220153689840462157371712141222157930479879390013202705007164190369002367504665809443492175901315777733674202715485191533092050345889633819011037402798630593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5267080db4b529870150b9103dc7979d5834817a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.boisestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.hope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mogp.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.texasbaptists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abwe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.communitygiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.compassionandchoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fairfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mybwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.okeeffemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sandiego.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ua.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewlhsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a78ea4a9a0000040300483046022100c8c4b58da95bbb1e5bf4717a2961cdc2adf1e179864e8c2ad769f943f0b33f9e0221009125ca9ed67dde502f779de85c8fbf0889e1b8d33f3133fc7cb2f41b135b93f4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a78ea4a8a0000040300473045022100db7268225c0840989fb1b2ddfabf4910d2fdf0af3a7cd74bd948935c189c809002201b91d61471b871348c29d0c453405806b9b20a0e0788ae3d83f9ece3abb17131
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d5a6d6f3d92c3a148c7ba52189135f7cb5ae0f451f960df92f5c0a2af3ca0135be6fba5f634d55ae781b27ab6f5850b6dd47f5c79526471a435e925e01781c111025d71f90f75586d60f3ce69bb9792078f4c059566d2630e897ddc6099a00a6977678a6625e2eb1b449e106639c7fb6b0319af9f88fa7b01964f2029d77fa0973c563a72c9383205579985da1fcd7c1c7bb4b747f8248d6811a852a38687087fa7bb16e885c279f9c07a87473e447681d5b45a64cfd800c7cf2cbe5f7645b6a0961874aec7e362a0be8f6a20dc3de23315437df20db03f6c6df8f6041c571dda596b9f3170c3f1f231f81b3411ae6501fe755b62a5596a9061a8fe01265b25