securedns1.planmygift.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:b4:16:bf:0d:30:d1:82:67:a5:61:ff:ec:dc:e1:48:3a was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=securedns1.planmygift.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:b4:16:bf:0d:30:d1:82:67:a5:61:ff:ec:dc:e1:48:3a
Serial Number (int): 324528474820411837275868299707809924204602
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:27:9e:52:5f:30:18:ee:85:9b:cf:6e:b9:2d:75:e6:e2:78:e1:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:8f:dd:50:e7:f4:44:f8:05:59:c7:f2:42:e0:46:47:db:c6:3a:f7
Fingerprint (sha256): 8a:ab:e7:fb:67:68:b7:7f:29:91:1f:b7:4a:d2:00:ea:d7:8f:36:83:ee:2a:77:5b:34:33:08:67:5d:d3:f9:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate securedns1.planmygift.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securedns1.planmygift.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreversyracuse.syr.edu
giftplanning.chiomega.com
giftplanning.colostate.edu
giftplanning.emory.edu
giftplanning.harleyschool.org
giftplanning.isugift.org
giftplanning.northwestern.edu
giftplanning.utk.edu
legacy.amcpfoundation.org
legacy.pathfinder.org
legacy.vermontpbs.org
llulegacy.org
montereybayaquarium.oceanlegacycircle.org
mycathedrallegacy.com
mylegacy.utmb.edu
mylegacygift.wmualumni.org
plan.capitalareafoodbank.org
planmygift.sfspca.org
plannedgiving.afmonline.org
plannedgiving.allb.org
plannedgiving.alliancetheatre.org
plannedgiving.alphachirho.org
plannedgiving.archny.org
plannedgiving.asianart.org
plannedgiving.assumption.edu
plannedgiving.atlantasymphony.org
plannedgiving.barnard.edu
plannedgiving.barry.edu
plannedgiving.blakeschool.org
plannedgiving.breckschool.org
plannedgiving.brightfocus.org
plannedgiving.bsomusic.org
plannedgiving.calpoly.edu
plannedgiving.cancersupportcommunity.org
plannedgiving.cazenovia.edu
plannedgiving.cccneb.edu
plannedgiving.ccsww.org
plannedgiving.childadvocates.org
plannedgiving.childrensnational.org
plannedgiving.christchurchschool.org
plannedgiving.conservancy.org
plannedgiving.cristoreystmartin.org
plannedgiving.crockerartmuseum.org
plannedgiving.crohnscolitisfoundation.org
plannedgiving.dcccd.edu
plannedgiving.denverymca.org
plannedgiving.desmet.org
plannedgiving.dioshpt.org
plannedgiving.dunnschool.org
plannedgiving.eden2.org
plannedgiving.epilepsy.com
plannedgiving.facs.org
plannedgiving.focushope.edu
plannedgiving.fredonia.edu
plannedgiving.gallaudet.edu
plannedgiving.gbfb.org
plannedgiving.gcfb.org
plannedgiving.gnof.org
plannedgiving.goodwilleasterseals.org
plannedgiving.graland.org
plannedgiving.greatcircle.org
plannedgiving.greensboroday.org
plannedgiving.grinnell.edu
plannedgiving.guidedogsofamerica.org
plannedgiving.hebff.org
plannedgiving.hf.org
plannedgiving.high.org
plannedgiving.hsmo.org
plannedgiving.johnstonhealth.org
plannedgiving.juilliard.edu
plannedgiving.kansashealthsystem.com
plannedgiving.lehigh.edu
plannedgiving.metopera.org
plannedgiving.mosaicinfo.org
plannedgiving.msuaf.org
plannedgiving.muttville.org
plannedgiving.nss.org
plannedgiving.park.edu
plannedgiving.pitt.edu
plannedgiving.rangelandtrust.org
plannedgiving.sdsu.edu
plannedgiving.shfb.org
plannedgiving.sja1890.org
plannedgiving.st-agnes.org
plannedgiving.transforminglives.org
plannedgiving.umbc.edu
plannedgiving.uso.org
plannedgiving.utfoundation.org
plannedgiving.weraise.org
plannedgiving.woodruffcenter.org
plannedgiving.wtxfoodbank.org
plannedgiving.wvwc.edu
plannedgiving.ymcabr.org
securedns1.planmygift.org
www.llulegacy.org
www.mycathedrallegacy.com

Other certificates including the domain name planmygift.org

(limited to 100 certificates)
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
*.planmylegacy.org
planmygift.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns3.planmygift.org
*.planmylegacy.org
securedns2.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
planmygift.org
planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
planmygift.org
securedns3.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
planmygift.org
*.planmylegacy.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns1.planmygift.org
securedns1.planmygift.org
securedns3.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns3.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
securedns4.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org
securedns2.planmygift.org
securedns.planmygift.org

Certificate

The complete raw certificate details for securedns1.planmygift.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0wdhj+eMIwOhs7J/8mc
TEm7MlMKOJAfAE9U3yfHTAxDe/9Bt575kHAKOvCF7BqXWII4ZOpU2QdpuPVHMXuj
nV6naa9GEEC270KWNAaUw6VmFurw2ae6RDUssQfe+zSouMUaIRRo5fqL1ua6RERM
I2pVp8gsO59iXcyyVvYoM46tCQXeEhQgFvDsTMYvH8YwNcwoVVCX3B2gDDtwsTZv
w3GViXeWt/a6qqqn50RZupzKkqhgFzhwVw3Hk0aBY6w9yLtZfUNUlbIQsHnoaKKi
EWIlSjjQxB3PFNjTCQCkHD6F4aIFsQHkSxYRYUmyE49GRyKM7wKtqiXSM4t1P3UL
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324528474820411837275868299707809924204602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 21:11:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-07 21:11:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securedns1.planmygift.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20614377577458736450399695844219730469623139037932203825973721480374562399117030401822411329827532598536444483110536195356446371365518799735165662943251080549039406865923405988901302926868925982895091602191662631339048675595426661831371587128366423560457464251058389094496032429090217085222260485599990050319925378878435616704102307278346234023932804234868263141722801080222710390834236316429880768014393547276041913560490641090896738330224298214180806016317099445119429494961244133635167573143397001940693987764591044724857671943337220631396512033084126632446193613575319313850224641204238045124705589948201370454881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db279e525f3018ee859bcf6eb92d75e6e278e1b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreversyracuse.syr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.chiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.colostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.harleyschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.isugift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftplanning.utk.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.amcpfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.pathfinder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.vermontpbs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montereybayaquarium.oceanlegacycircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacy.utmb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegacygift.wmualumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.capitalareafoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planmygift.sfspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.afmonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.allb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.alphachirho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.archny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.asianart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.atlantasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barnard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.barry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.blakeschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.breckschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.brightfocus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.bsomusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.calpoly.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cazenovia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cccneb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ccsww.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childadvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.childrensnational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.christchurchschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.conservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.cristoreystmartin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crockerartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.crohnscolitisfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dcccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.denverymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.desmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dioshpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.dunnschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.eden2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.epilepsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.focushope.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.fredonia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gallaudet.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gbfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gcfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.gnof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.goodwilleasterseals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.graland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greatcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.greensboroday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.grinnell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.guidedogsofamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hebff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.hsmo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.johnstonhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.kansashealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.lehigh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.metopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.mosaicinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.msuaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.muttville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.nss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.park.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.pitt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.rangelandtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sdsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.sja1890.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.st-agnes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.transforminglives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.uso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.utfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.weraise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wtxfoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.wvwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannedgiving.ymcabr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedns1.planmygift.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llulegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycathedrallegacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001729b238b8e0000040300473045022013da8b15368a217c2e457395da4508e9f0f6fc05fc81af01cb61efc362dd9835022100cf6738e60009c3477ceaad5c0184c925db39f87314e25264062c63b0a4d7acea00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001729b238bba0000040300473045022100f65435ed904c451586b51a58fb28fa383298c67f29abe960ef556bd0daf1466302201ee1525eafa4ac1ed2a62237a750517aea82e4bf3ef62b044d2f1fc688e349df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003901220afe1c656e46e40ce72153000da95f01bdc2983729f694c0b0ad9e5967f69b57221548c39e256d8bc38c33603de8087c6ab5913efe812f9372b26802ca1729aec085ef89757d05dd802eb9f7cc520a94a27c5bf1416a707216f411831b9fe2b64e337edaafcc8b49ef2d7c46376b03e1edb048910517944c6a1758e9c916b8757dddb65c29150b16b173c2c0cffd25396f6cdba4b6ef014dc1febdffbbfd57aedaf5a863ab25ac8db9a7c817c96e4484b66e281974690a94a81b8343b350b7aaed3fe0a7d39803ee92bf6742372c3098bfbbdf512a62312861f61b4839784c647f644d0b21f60aa28e476485fe09f07898c4813f6d29141c1521efc57c