mask11.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number d5:88:1c:aa:ec:29:80:05 was issued on by GoDaddy.com, Inc..

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask11.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d5:88:1c:aa:ec:29:80:05
Serial Number (int): 15386579647343460357
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 54:f4:a3:82:98:18:e9:1a:52:43:5e:d5:4f:42:46:9e:16:c5:24:b4
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 81:2a:51:23:c5:51:00:a7:38:ff:c4:54:34:b0:60:93:16:fa:ae:5c
Fingerprint (sha256): 02:4b:26:c9:4a:88:f5:57:03:9a:d9:7e:6a:fa:de:98:66:63:e1:6b:41:ff:4f:5a:49:d1:93:6c:d2:a0:89:51

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-518.crl

Check the revocation status for certificate mask11.classy.org

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask11.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask11.classy.org
www.mask11.classy.org
give.yambamalawi.org
support.project2713.org
give.feedingsandiego.org
donate.bbbschgo.org
donate.islamicity.org
beboundless.ashoka.org
donate.thousandcurrents.org
donate.voiceofwitness.org
fundraise.hopeoflifeintl.org
donate.vitaminangels.org
sunraise.glennon.org
give.uwkc.org
give.carryingtoterm.org
fundraise.homefrontwarriorsproject.org
donate.projectsunshine.org
support.starkeyhearingfoundation.org
donate.taradhatu.net
donate.downtownyorkpa.com
donate.thesheridanstory.com
my.strong4sam.org
donate.freedomproject.com
fundraise.unfoundation.org
give.diyalofoundation.org
donate.americanprairie.org
donate.goforefront.org
donate.ecorise.org
my.eyeheartworld.org
support.turtleconservancy.org
support.firstbookcanada.org
donate.kajokejihealthtraining.org
impact.chordomafoundation.org
fundraise.centralasiainstitute.org
support.theatrewithin.org
donate.lapride.org
fundraise.avonbcc.org
donate.cpfe.org
give.yehudi.today
donate.amurt.gift
donate.rickymartinfoundation.org
give.aidventurer.org
donate.impact247.org
give.farmstew.org
donate.tusk.org
give.onepurse.org
donate.lovewithoutbordersca.org
support.firstbook.org
donate.carrollchristian.com
donate.bootcampaign.org
give.fosterclub.com
fundraise.nothingbutnets.net
donate.teamrwb.org
impact.achanceinlife.org
donate.denovofoundation.org
donate.spoken.org
give.roomtoread.org
act.riseagainsthunger.org
impact.specialolympicsva.org
give.rmhcsca.org
fund.109world.com
donate.projectkoru.org
fundraise.csuinc.org
donate.traffickinginstitute.org
support.girlsinthegame.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org
mask19.classy.org

Certificate

The complete raw certificate details for mask11.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw57J8Dqhjjv/ej7MaQ2+
E3Fr+oNeqIu3IndmuRhSk+nIFuMihv6tl87o59E7QrEpyZp9IFkQxsOFFxc6QAtw
Pa4M36PSGUikXlOVk1FampnFpUsJc095gx5yekITuhO+vXQth4m7dRflymtyuPFr
v+KbFHFZYuZUFbddLTDQRgzG4pRkaTAWEd/sgRX25JFfeHvCfC3vxssZvZQokUlH
0tK+DEIKL6BTHuTye59c6yvjtlcgwIctVpzfRoKNOnElQdW47R5farIxeI0dQRne
KBStMo0dyBhWDK26NAQGDAP2tFv/e79eqvUEpjhzg5dns5T+LCEVZVv10KUtNj8w
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15386579647343460357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 08:29:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 16:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask11.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24694771154781485702722907882004612573497497422523583556869580792766225036404839100626719842270918316051272985084993972205361322918964316724348869933937938311363825957194950427539889808190024557129979049328441204941310213135538146747175013113534038658095866504151926631152652783506951169983853898909310204946719238704178767400098482958625562620820904247472523183686198757533059040714270541174623915765703427375474231821319344417919682815837600182351487249353695348194863860417364732781212403497935760055279308332990944501974489660179108047623626992391786703025123999458894645787611803309864807846287999025525238477009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-518.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1637 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask11.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask11.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.yambamalawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.project2713.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.feedingsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bbbschgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.islamicity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beboundless.ashoka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thousandcurrents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.voiceofwitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.hopeoflifeintl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.vitaminangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunraise.glennon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.uwkc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.carryingtoterm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.homefrontwarriorsproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.projectsunshine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.starkeyhearingfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.taradhatu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.downtownyorkpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thesheridanstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strong4sam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.freedomproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.unfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.diyalofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.americanprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.goforefront.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ecorise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.eyeheartworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.turtleconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstbookcanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kajokejihealthtraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.chordomafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.centralasiainstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.theatrewithin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lapride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.avonbcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cpfe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.yehudi.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amurt.gift'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.rickymartinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aidventurer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.impact247.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.farmstew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.tusk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.onepurse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lovewithoutbordersca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstbook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.carrollchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bootcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fosterclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nothingbutnets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.teamrwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.achanceinlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.denovofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.spoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.roomtoread.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.riseagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.specialolympicsva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.rmhcsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.109world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.projectkoru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.csuinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.traffickinginstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.girlsinthegame.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54f4a3829818e91a52435ed54f42469e16c524b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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