securedns1.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:16:d9:d4:dc:fa:7a:c2:20:5c:05:40:92:45:e2:fa:41:2d was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:d9:d4:dc:fa:7a:c2:20:5c:05:40:92:45:e2:fa:41:2d
Serial Number (int): 356224903523296114198121207343965248569645
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:9c:33:69:17:05:ee:02:74:54:99:95:57:23:54:5b:f1:33:70:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:76:10:24:d7:55:3d:1f:13:ed:da:d1:f6:80:c7:63:42:b3:1a:93
Fingerprint (sha256): 50:0c:8c:3a:21:4c:dd:a3:db:b3:12:e7:c0:be:3f:c4:43:dc:cf:cc:8f:94:7c:05:6e:7e:48:36:9f:59:7a:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns1.planmygift.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.amcpfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacygift.wmualumni.org
pg.unthsc.edu
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.adventhealth.com
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.atlantasymphony.org
plannedgiving.au.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.calpoly.edu
plannedgiving.cancersupportcommunity.org
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.creighton.edu
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desertaidsproject.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.eden2.org
plannedgiving.facs.org
plannedgiving.feedingamerica.org
plannedgiving.focushope.edu
plannedgiving.franciscan.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.grinnell.edu
plannedgiving.guidedogsofamerica.org
plannedgiving.hillel.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.kxt.org
plannedgiving.lehigh.edu
plannedgiving.metopera.org
plannedgiving.mnzoo.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.rowan.edu
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.spsmw.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4oghYgFCMXjWGjCHbiK
PiwMaOscjh3PwUGVta/8Myy9/8KCa7HSOOMdcrhjaCgRIy1RtlXnoVbkBQpkv1jc
E600fSiSTHMavwy8zMcqB7WZ/I6B8LD5ZOav21ZngkQdk1jff+3XcUEesHFa3Qlg
NxrtHtj3hCMSCh5uLvMgrYy7Y5wE+/gv+rdmCkoMU2Gwg1G9WUyPKflkmkLVRwz1
qG6UiGkZ/BrYxfxaajqZkUGLHw1tIJx/VNcbajP6T95WAzneMHtEZhwl5LkIawgH
NzYsY6nbWh8d6INZf4RsDynFXCIYqyFl43xZuPhnsbLFryM4kbC1TKBlbWD3ic2V
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356224903523296114198121207343965248569645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 15:52:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 15:52:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22159816349870061575020099870220823786287085509137584889148578678765022610727029658534349208977155643645702553334628477742377295995653354727876161865013522564181265637257107167852134420514292007419615803687227596312998656430931218342751776776498135428901139739073001452121182609542144140318957506019246594067075060889993305149282002016853563173774574292655346306194521851251569394521706840901787129419702508670748336439861027424627864120291634545937445863878628791795006149318597869997927663617618386926607119706485301790574649722302234772414072285565349177419005485020311766526241303529242531979878046016419463533833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							299c33691705ee02745499955723545bf13370f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2733 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.amcpfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.adventhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.au.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.creighton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desertaidsproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.franciscan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.grinnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hillel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kxt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lehigh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rowan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spsmw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018810e1182700000403004730450220581a9615c4230b5c5e12aa9e59e88831ab52fa1a7ecb241f9f095985df4b48f1022100a2861b8ab3ad55ebc8ff4f598764464df4e56dc88b220142a8ee748f91d2c282007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018810e1185b0000040300463044022018d8921d53f17938b23c0089647850d64b505cc71f59bdad4adb1533624077df0220038f50c72751d5e0fb6f02e51b0bf12f2a1a2ee5914fcc74e4b5412b9b03b4d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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