securedns3.planmygift.org

Issued by R3

About this certificate

This digital certificate with serial number 04:3c:af:e5:2b:0e:e1:a3:87:b1:a1:48:ad:fb:9a:e2:28:fe was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns3.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:af:e5:2b:0e:e1:a3:87:b1:a1:48:ad:fb:9a:e2:28:fe
Serial Number (int): 369099890550862898202719273574888437328126
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:39:e8:9d:45:e7:ca:2c:b6:48:79:e1:94:be:c4:9a:ff:2a:7e:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:ba:bf:a2:f8:ec:0a:16:40:63:f6:54:1b:99:44:6d:ff:50:19:12
Fingerprint (sha256): 5f:de:d5:ca:61:cd:48:8d:bf:4f:60:81:f5:a8:b2:fb:b8:28:92:c3:2a:66:b9:d3:33:10:f5:fc:eb:14:68:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate securedns3.planmygift.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns3.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giftplanning.du.edu
giftplanning.radyfoundation.org
giftplanning.uwm.edu
giftplanning.villanova.edu
giftplanning.wsu.edu
legacy.crisiscenter.com
legacy.lmu.edu
legacygift.ascefoundation.org
myplannedgift.ridgeviewmedical.org
pg.unthsc.edu
planmygift.morris.umn.edu
planmylegacy.uwf.edu
plannedgiving.bannerhealthfoundation.org
plannedgiving.brrh.com
plannedgiving.caldwell.edu
plannedgiving.caramoor.org
plannedgiving.centre.edu
plannedgiving.clf.org
plannedgiving.cristoreybalt.org
plannedgiving.culinary.edu
plannedgiving.cvtc.edu
plannedgiving.dar.org
plannedgiving.davidson.edu
plannedgiving.edwardfoundation.org
plannedgiving.fasterfarther.gmu.edu
plannedgiving.feedingamerica.org
plannedgiving.fenwickfalcons.org
plannedgiving.fhu.edu
plannedgiving.fortlewis.edu
plannedgiving.fvtc.edu
plannedgiving.geron.org
plannedgiving.hheonline.org
plannedgiving.hsutx.edu
plannedgiving.idyllwildarts.org
plannedgiving.innovia.org
plannedgiving.jbu.edu
plannedgiving.kentri.org
plannedgiving.kiddo.org
plannedgiving.kzoo.edu
plannedgiving.lagrangesymphony.org
plannedgiving.latinschool.org
plannedgiving.lwv.org
plannedgiving.macomb.edu
plannedgiving.mannafoodbank.org
plannedgiving.maryvale.org
plannedgiving.mc.edu
plannedgiving.mcgeheeschool.com
plannedgiving.mcm.edu
plannedgiving.mines.edu
plannedgiving.morehouse.edu
plannedgiving.msffoundation.org
plannedgiving.newmanschool.org
plannedgiving.northcross.org
plannedgiving.northmemorial.com
plannedgiving.nycballet.com
plannedgiving.odu.edu
plannedgiving.ollusa.edu
plannedgiving.ozarks.edu
plannedgiving.providence.org
plannedgiving.rosemont.edu
plannedgiving.rpbusa.org
plannedgiving.salk.edu
plannedgiving.sbschool.org
plannedgiving.scottishritehospital.org
plannedgiving.semesteratsea.org
plannedgiving.sfhscollegeprep.org
plannedgiving.sinclair.edu
plannedgiving.spa.edu
plannedgiving.stac.edu
plannedgiving.stcharlesprep.org
plannedgiving.stchristophers.com
plannedgiving.sths.org
plannedgiving.stjudemedicalcenter.org
plannedgiving.stlcop.edu
plannedgiving.stlcop.org
plannedgiving.stmarysdominican.org
plannedgiving.stolaf.edu
plannedgiving.stpiusx.org
plannedgiving.tcu.edu
plannedgiving.thearcsf.org
plannedgiving.thefutureofhealthcare.org
plannedgiving.thomasu.edu
plannedgiving.txaglandtrust.org
plannedgiving.uconn.edu
plannedgiving.ucsb.edu
plannedgiving.ulpgh.org
plannedgiving.umbwmc.org
plannedgiving.unt.edu
plannedgiving.uua.org
plannedgiving.vnacarenewengland.org
plannedgiving.vwu.edu
plannedgiving.walsh.edu
plannedgiving.waterforpeople.org
plannedgiving.williamson.edu
plannedgiving.wlc.edu
plannedgiving.wlrn.org
plannedgiving.womans.org
plannedgiving.wqed.org
plannedgiving.ywca.org
securedns3.planmygift.org

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
*.PLANMYGIFT.ORG

Certificate

The complete raw certificate details for securedns3.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0US+VUKS8W2RQqrZ7Zf
CTwGVR+jEgn1dgtaS5bgPlLGctdNCXY0WjjMsgUYQbk6hQmzMoywpO7ICcvjSdBb
PaQh3u11HqvsOrQg6SIShFW6OyrX2stErZr/K8eMS/hwxH9oiQFDo4WW43jiA40y
XEKrfE3Rr8AA9rRZLoxB1hUjlrgZombSg6UzdfRjvs0XFYYTk3UlzHA+BEijzXpz
CJfg+vNe/46iK5DWLNd7im+QxzQqEC/6nzw155Z/UuKYNyIT/krfclnn9eJfaR4K
2BdLAIgaomhvY9e9ncrzLFLiEvQDdeLpI24aPdGmxs1r8qOV1IVnnFP8JD7pHrAx
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369099890550862898202719273574888437328126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-19 17:37:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-19 17:37:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns3.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18086139326740229815258363658938080888464565808068105617456476732708495248688780531735078161924088213745720626620400059099459506792933491393251249070183443082175861712679287129147697135963851353768439895788590779842826535249164631341822814823956274581036270369304561582603880952060191396845167375854063561538286126729629499924111419740012723665303310749314758296936864892534190539289081323255523188852398964561623950597500962292343849608168469005282770757031381875889707763517037516204162912952387122542860852527953745518558417504274303663535233574937977671318346136193938967363955538005903783815717117571192910262637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8739e89d45e7ca2cb64879e194bec49aff2a7e67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2789 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.radyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.villanova.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.crisiscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.lmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacygift.ascefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplannedgift.ridgeviewmedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.unthsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.morris.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmylegacy.uwf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bannerhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caldwell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.caramoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.centre.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.clf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreybalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.culinary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.edwardfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fasterfarther.gmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fenwickfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fortlewis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fvtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.geron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hheonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsutx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.idyllwildarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.innovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.jbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kentri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kiddo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kzoo.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lagrangesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.latinschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.macomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mannafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.maryvale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcgeheeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mines.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.morehouse.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msffoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.newmanschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northcross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.northmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nycballet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ollusa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ozarks.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.providence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rosemont.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rpbusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.salk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sbschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.scottishritehospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.semesteratsea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sfhscollegeprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sinclair.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.spa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stcharlesprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stchristophers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stjudemedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stlcop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stlcop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stmarysdominican.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stolaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.stpiusx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.tcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thearcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thefutureofhealthcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.thomasu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.txaglandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uconn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ulpgh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbwmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.unt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vnacarenewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.vwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.walsh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.waterforpeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.williamson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wlrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.womans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ywca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns3.planmygift.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e73a0d707000004030046304402202b53e5909bc26c436ff1751a3229808f16d70d9295a6c858cae599678bc53332022068e72b175abaec0ff1d8e269bf2674d0efba95c3ec6c6d1e1c007c8c78df60de0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e73a0d6e500000403004730450220273cb0d06c5cbbc9eb7c17cf6fdb1e6b1cbbfdfe9d4276d615de13c36e743223022100c845f245e63889c6dfb79602f344938369bb678e9fc2ecb5d9cbc05d76a703cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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