securedns.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:13:99:4c:c4:86:70:8c:50:8a:2e:c2:6b:34:b7:15:db:63 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:99:4c:c4:86:70:8c:50:8a:2e:c2:6b:34:b7:15:db:63
Serial Number (int): 355118279182458846211445666061344849648483
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:32:6c:32:a0:3b:49:9e:0c:f9:39:b9:da:42:ce:99:2a:fb:6d:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:81:66:4d:08:99:c9:39:d3:e8:59:5a:12:e9:72:c3:f0:5f:88:5f
Fingerprint (sha256): 47:a6:e0:24:ac:c5:66:41:4f:28:69:9c:a0:15:1f:53:1c:a8:c2:58:4b:96:a5:89:8d:c1:5c:1c:47:13:72:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns.planmygift.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beachlegacy.org
catholiclegacy.org
foundation.stpaulsmobile.net
giftandestateplanning.jburroughs.org
giftplanning.cu.edu
giftplanning.missouri.edu
giftplanning.tulane.edu
giftplanning.ucsd.edu
giftplanning.uff.ufl.edu
giftplanning.umd.edu
giftplanning.ursinus.edu
giftplanning.wheelerschool.org
giftplanning.wmpenn.edu
jcf.jewishpalmbeach.org
legacy.ccsfoundation.org
legacy.chicagosfoodbank.org
legacy.hsi.org
legacy.humanesociety.org
legacy.rmhcsd.org
legacy.si.edu
legacycircle.cartercenter.org
legacygiving.carnegiehall.org
letstalk.stelter.com
lsuhealthgiving.org
mylegacy.njcu.edu
mylegacy.worldvision.org
mylegacygift.mywmu.com
mylegacygift.unitedwayoc.org
myplannedgift.providence.org
myplannedgift.strazcenter.org
planmygift.aicr.org
planmylegacy.bowery.org
planmylegacy.solvehungertoday.org
planmylegacy.ymcafw.org
plannedgifts.providence.org
plannedgiving.archgh.org
plannedgiving.archny.org
plannedgiving.bcp.org
plannedgiving.bryant.edu
plannedgiving.carenewengland.org
plannedgiving.cedarlake.org
plannedgiving.cedars-sinai.edu
plannedgiving.central.edu
plannedgiving.cfswia.org
plannedgiving.childrensaidnyc.org
plannedgiving.chla.org
plannedgiving.clevelandorchestra.com
plannedgiving.cristoreyjesuit.org
plannedgiving.csjsl.org
plannedgiving.dallasopera.org
plannedgiving.dmei.org
plannedgiving.drake.edu
plannedgiving.gatech.edu
plannedgiving.gmu.edu
plannedgiving.hadassah.org
plannedgiving.hli.org
plannedgiving.hss.edu
plannedgiving.iup.edu
plannedgiving.mayoclinic.org
plannedgiving.micds.org
plannedgiving.michaeljfox.org
plannedgiving.mote.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mskcc.org
plannedgiving.msmnyc.edu
plannedgiving.nmsu.edu
plannedgiving.noetic.org
plannedgiving.nu.edu
plannedgiving.psmuseum.org
plannedgiving.purchase.edu
plannedgiving.sdhumane.org
plannedgiving.sja1890.org
plannedgiving.sjcny.edu
plannedgiving.stcharlesprep.org
plannedgiving.stjo.org
plannedgiving.tcnj.edu
plannedgiving.thedacare.org
plannedgiving.tidewellfoundation.org
plannedgiving.tidewellhospice.org
plannedgiving.tiffin.edu
plannedgiving.transforminglives.org
plannedgiving.twu.edu
plannedgiving.ucdavis.edu
plannedgiving.uky.edu
plannedgiving.umich.edu
plannedgiving.upike.edu
plannedgiving.wheelerclinic.org
plannedgiving.whs.org
plannedgiving.wish.org
plannedgiving.wvuf.org
plannedgiving.zaytuna.edu
rmhcpghome.org
securedns.planmygift.org
shcgiftplanning.org
utdallasgiving.org
www.catholiclegacy.org
www.rmhcpghome.org
www.shcgiftplanning.org
www.utdallasgiving.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVcoe7S0NMvZJj8VxLde
PICsp1Nq4nb+KAwR/SxBH6nQ1rXz5P84n/dTgrwa5eMyE1zfxjIGjBeq+oPIlb2C
ps3BolCnzv1yzsNQ+lAhC7Ao4XNOxqATpQkGwWuCzl8o3OSRosED3nYMTKNCQmEb
AiXLl+QtM7jk2b8jMurozkN35id3hKPzFDwZRsxAL/wMnfrH1i/QRWelE0HMTIRH
zCdoA3W5sri/4X7YwDgFtl+cldHsicJpWwpC3PocYtafRYj+KFi441en5fsMz4hh
qvg5Z2zz3Ti1sMNNqPbd6fO5ohuKi8PSs74KZFRf5khmonCZbF9fZ2IEiYiucb0o
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355118279182458846211445666061344849648483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 12:41:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 12:41:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21377252818775062728101148136491077918182707577258812874226000008934748776654190794989236789742477271396740683622782898608955758395729353457184311236547085911642255619868877646557866629892321048726784485833828363721327762607989729478679856068204237402442099551875591902491952530264642163323442998367741495511217344866186375735793873286766673707599480407325128218735792637800037250532449007460342578680673554695536551014795667326603468732779005035108043907606022980787452169549335991998500879131868986196692496794461007057001945045729508037866721177145300123628298440415331834782911305389598511335905464359210245236769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8326c32a03b499e0cf939b9da42ce992afb6dc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.stpaulsmobile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftandestateplanning.jburroughs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.missouri.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ucsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uff.ufl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.ursinus.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wheelerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wmpenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcf.jewishpalmbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ccsfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chicagosfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.humanesociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.rmhcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.si.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycircle.cartercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.carnegiehall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalk.stelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuhealthgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.njcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.mywmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.unitedwayoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.strazcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.aicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.bowery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.solvehungertoday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.ymcafw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bcp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bryant.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.carenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cedars-sinai.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.central.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clevelandorchestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreyjesuit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.csjsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dmei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.drake.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hadassah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hss.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.iup.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mayoclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.micds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mskcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msmnyc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nmsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.noetic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjcny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stcharlesprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcnj.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thedacare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tidewellhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tiffin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.twu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.upike.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wheelerclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.whs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.zaytuna.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdallasgiving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiclegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhcpghome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcgiftplanning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utdallasgiving.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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