securedns4.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:66:e8:57:87:12:6e:e5:d1:fe:30:18:55:f9:71:69:ff:88 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns4.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:e8:57:87:12:6e:e5:d1:fe:30:18:55:f9:71:69:ff:88
Serial Number (int): 383466780517411227477266011905461311897480
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:3c:df:9f:fd:2f:00:9b:38:93:73:33:2e:91:5c:a2:19:41:60:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:c1:61:40:d7:93:7f:d2:d2:94:c8:3a:2c:4a:a6:81:9f:56:58:1c
Fingerprint (sha256): 54:81:ee:9d:7a:9b:bd:47:07:e6:e4:a5:bc:af:d4:a8:44:8e:d7:15:e4:c8:ff:38:bc:e7:a6:0c:39:88:38:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns4.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns4.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caresfuture.org
davplanmygift.org
divinity.duke.myplannedgift.org
eastersealspghub.org
evergladeslegacy.org
foodbankpg.org
foundation.convoyofhope.org
foundation.elca.org
founderssociety.abi.org
giftplanning.andover.edu
giftplanning.davidson.edu
giftplanning.evergreenhealthfoundation.com
giftplanning.sarahlawrence.edu
health.usf.planmylegacy.org
legacy.carle.org
legacy.nwf.org
legacygiving.atlantamission.org
legacygiving.capradio.org
legacygiving.sfopera.com
legacyplanning.caritasofaustin.org
mipgc-conference.com
msomusicallegacy.org
mylegacygift.augustinianfund.org
myplan.sierraclub.org
planmylegacy.northwoodtech.edu
plannedgifts.providence.org
plannedgiving.abi.org
plannedgiving.altamedfoundation.org
plannedgiving.aps.org
plannedgiving.arcmh.org
plannedgiving.bgcarenav.org
plannedgiving.bishopmanogue.org
plannedgiving.bishopoconnell.org
plannedgiving.bostonchildrens.org
plannedgiving.brunswickschool.org
plannedgiving.bushnell.edu
plannedgiving.calarts.edu
plannedgiving.calfarley.org
plannedgiving.cazenovia.edu
plannedgiving.centerforearlyeducation.org
plannedgiving.centerofthewest.org
plannedgiving.cfswia.org
plannedgiving.chesapeakeconservancy.org
plannedgiving.childrensal.org
plannedgiving.crcds.edu
plannedgiving.daphealth.org
plannedgiving.dom.edu
plannedgiving.fenwickfalcons.org
plannedgiving.galvbay.org
plannedgiving.givecmh.org
plannedgiving.guthrietheater.org
plannedgiving.kera.org
plannedgiving.maineaudubon.org
plannedgiving.miamijewishhealth.org
plannedgiving.mnopera.org
plannedgiving.mpnresearchfoundation.org
plannedgiving.mpr.org
plannedgiving.mslegal.org
plannedgiving.mtcf.org
plannedgiving.musowls.org
plannedgiving.nationalmssociety.org
plannedgiving.northampton.edu
plannedgiving.northwestharvest.org
plannedgiving.nrhfoundation.org
plannedgiving.operationfoodsearch.org
plannedgiving.oregonfoodbank.org
plannedgiving.ou.edu
plannedgiving.pcom.edu
plannedgiving.peggyadams.org
plannedgiving.ppoh.org
plannedgiving.providence.edu
plannedgiving.purchase.edu
plannedgiving.saintpeters.edu
plannedgiving.seg.org
plannedgiving.shadysideacademy.org
plannedgiving.sjny.edu
plannedgiving.slu.edu
plannedgiving.trinity.edu
plannedgiving.udallas.edu
plannedgiving.uhsp.edu
plannedgiving.umassmed.edu
plannedgiving.usm.maine.edu
plannedgiving.usmfoundation.com
plannedgiving.uwp.edu
plannedgiving.valleyymca.org
plannedgiving.vermontpublic.org
plannedgiving.vmfa.museum
plannedgiving.vnatexas.org
plannedgiving.vpr.org
plannedgiving.walnuthillseagles.com
plannedgiving.wartburg.edu
plannedgiving.waterforpeople.org
plannedgiving.wcrichmond.org
plannedgiving.ymcahouston.org
plannedgiving.ymcasd.org
securedns4.planmygift.org
www.davplanmygift.org
www.eastersealspghub.org
www.foodbankpg.org
www.mipgc-conference.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns4.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMudkSJHpCJtmQpuPSFt
GaVzS6bRhaS7ELe0SUksD6ojrE2/0sUGWczSc5r5qYDsXyNPDGvgZsiP5HNYD38v
IayNs036DfukhszX+jUElSQ+4XMebYrF+kZxvutW8AFqAf6L6LmFc0CFFpje5AEZ
qFXuHMoAu62/ZB+tYRSWEU/vQXLw+OcK3Nt7+OdwJj91xrh70xdlCw29Ai8qJKsr
Ho77e0raQnC/LTp81QNHugumkxFlQCdJZRPS7GxREeFADirEk+ci4B/gkEMrC0J2
EiPAg8b2jvthqTO4n4z40WXZz46c1KdoQuGfZGq0HQYzA6btdqv/umQgMC5ES+qA
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383466780517411227477266011905461311897480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 16:05:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 16:05:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns4.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20298535337760176505924888369609978753689183358394737038066721084106262586444853470122409906092147176022519881008244073928424888638936578299291371562241108492297937138621089834332126419660087984890972300312197330473264994527404710755782229855792329914424376111164750456668046191164000149831662825909454034015210261831378874552734520849212644020345778506328444515647009449374316416696471790464669638189587151826790971624633598865663275840694535479079649935576870096504528910741501459850003801202656025135317668776445194047760152557235852465349478371272586582408535574394101095935010350036230683982940433185744454582477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							423cdf9ffd2f009b389373332e915ca219416004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2853 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caresfuture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinity.duke.myplannedgift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergladeslegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.convoyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.elca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'founderssociety.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.andover.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.evergreenhealthfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.sarahlawrence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.usf.planmylegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.carle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.nwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.atlantamission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.capradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygiving.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyplanning.caritasofaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipgc-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msomusicallegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.augustinianfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.sierraclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.northwoodtech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgifts.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.abi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.altamedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.aps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.arcmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bgcarenav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopmanogue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bishopoconnell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bostonchildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brunswickschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bushnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calfarley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerforearlyeducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centerofthewest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cfswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.chesapeakeconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.daphealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.galvbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.givecmh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maineaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.miamijewishhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpnresearchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mslegal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mtcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.musowls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nationalmssociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northampton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northwestharvest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nrhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.operationfoodsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.oregonfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.peggyadams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ppoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.purchase.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.saintpeters.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.seg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shadysideacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sjny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.slu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.trinity.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.udallas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uhsp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umassmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usm.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.usmfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uwp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.valleyymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vermontpublic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vmfa.museum'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnatexas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vpr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walnuthillseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wartburg.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wcrichmond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcahouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns4.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davplanmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastersealspghub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodbankpg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mipgc-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183fb81a44d000004030048304602210083dec2e1a6528fea64f51f1b3026b366c2247a652912dc93694dbf68002b6cf1022100ab15e10292cca60b27bb2f397d97e796f3bb520cb96122d027d69b575e4f1f490076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183fb81a47b0000040300473045022100e0a2a17668ff5e7f999c815cb4d186c0e3c653ae0260e9514166919e64f04b8a02202f087facd433e3d50e071a0907f3577809aad553c940419bb3978e3f8499f443
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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