securedns.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:7d:8a:89:4e:d3:50:84:f5:fa:81:62:24:40:d6:81:a6 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:7d:8a:89:4e:d3:50:84:f5:fa:81:62:24:40:d6:81:a6
Serial Number (int): 410207124961105751819111333292755262013862
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:ab:ee:5a:ec:56:02:14:8f:94:31:86:77:ee:69:7b:57:f4:d5:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:ea:8a:61:2d:48:ea:d1:95:ab:bf:4e:75:f6:c9:d7:8d:b9:4e:83
Fingerprint (sha256): 42:b3:02:f3:51:f9:05:78:a8:12:0c:f7:ce:19:31:cd:9d:d7:43:ab:2b:03:a5:ce:fe:db:c0:4c:57:97:85:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns.planmygift.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beachlegacy.org
catholiclegacy.org
foundation.stpaulsmobile.net
giftandestateplanning.jburroughs.org
giftplanning.cu.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.umd.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
jcf.jewishpalmbeach.org
legacy.ccsfoundation.org
legacy.chicagosfoodbank.org
legacy.hsi.org
legacy.humanesociety.org
legacy.rmhcsd.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
letstalk.stelter.com
lsuhealthgiving.org
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.mywmu.com
mylegacygift.unitedwayoc.org
myplannedgift.providence.org
myplannedgift.strazcenter.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.ymcafw.org
plannedgifts.providence.org
plannedgiving.archgh.org
plannedgiving.archny.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.carenewengland.org
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.central.edu
plannedgiving.cfswia.org
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.drake.edu
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hli.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sandiego.edu
plannedgiving.sdhumane.org
plannedgiving.sja1890.org
plannedgiving.sjcny.edu
plannedgiving.stcharlesprep.org
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellfoundation.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.transforminglives.org
plannedgiving.twu.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
shcgiftplanning.org
utdallasgiving.org
www.catholiclegacy.org
www.rmhcpghome.org
www.shcgiftplanning.org
www.utdallasgiving.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMLElfZz5uV+EPSyka08
+0apGH7XNwtfmgpERYbIL06u9fqI15qdoAg7B4bzDC7Ja133tzp1w1jG8Pl3Gx+H
EOcKwODwmoOBqdmk8n0yscE0/Jbzt0qys/XWrMbzRS853Gm1yS55Qr7cXxRk/q96
aPb8f0O0IB3GBDqx8/Cx9lzzfcYnAVhHaTuEW+0HxuhmsbYGGvvuSVaHYYnHqZFb
9eYdUjkn0aqP9ciVc2uaGC+E8F5AeZpRsNje8ruKwzn9sjJeDXfHJvvgOcoU+s6c
eMhrwfoTTPiS7sTgmsHEaKzjWEEmxly3sMPQ/YHb5bE9fo1uH2Ei+Aab3FHvCJy0
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410207124961105751819111333292755262013862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 13:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 13:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18274359552731065776574299366327629639488934790407330049484395996312079775568189904569566544183465340391799982819703031818633451207139644286918356533499009435968291142777924569496242633390508199353139855488189827127332995892461249628323279452921643180415004320838387013573912890281126748466127789179238962687091700303023616061419690378262121166556444306986359072347426019948332849506250399837561655820291905019611189895855463602493978845059627387308337839262008181062650223963013346859853538648094979795959908480102360998445584220959999786302338309853553272656998726332274914371026190312987569782563345784726938760379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbabee5aec5602148f94318677ee697b57f4d564
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.stpaulsmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcf.jewishpalmbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chicagosfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.rmhcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalk.stelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuhealthgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.mywmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.strazcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.carenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.central.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.drake.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sandiego.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stcharlesprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.twu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdallasgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdallasgiving.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896e7e222f0000040300463044022059cf966219090cb0aa53f7ff44805cdd2318736eee45ba03fc900bb0b6649cb0022035a99711f977d98c569a558b0a72ed39c699100eb0c677122dd81179cab0612b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001896e7e223b0000040300473045022100ada3867fb5dddf5ee541899a548eac6fc2adb0381e2b1096d2cbf6bbaee8917e02205941bdde530c84bde24b77001f42535c46b2cc419a6cc92d51bf3721425fcab8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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