*.givegab.com
- Givegab, Inc. -
Issued by GlobalSign CloudSSL CA - SHA256 - G3
About this certificate
This digital certificate with serial number 35:4f:42:98:0f:e7:59:97:06:56:26:82 was issued on by GlobalSign nv-sa.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Givegab, Inc.
Organization:
Givegab, Inc.
State / Province:
NY
Locality: Ithaca
Country: US
Locality: Ithaca
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 35:4f:42:98:0f:e7:59:97:06:56:26:82Serial Number (int): 16498525141519796083021457026
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 03:d7:40:5f:ce:47:96:b7:c3:16:62:82:38:03:8c:52:e1:68:be:57
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6
Fingerprint (sha1): 74:a2:71:52:af:36:b1:b5:56:76:2a:c9:e7:e6:7b:15:14:02:47:a8
Fingerprint (sha256): 02:b3:ca:23:52:5f:98:b5:c6:d9:37:f0:92:a9:b4:dd:33:73:ea:86:7f:32:1d:b1:f7:22:09:3a:89:37:e0:5c
Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3Check the revocation status for certificate *.givegab.com
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.givegab.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.givegab.com
*.canisiusgivingday.com
*.springiton.org
freegivingtuesday.org
*.freegivingtuesday.org
gg-staging.oregoniansgive.org
givingisgorges.org
*.givingisgorges.org
msdayofgiving.org
*.msdayofgiving.org
staging.cunytuesday.org
staging.givingisgorges.org
staging.hhgivingday.org
staging.hvgives.org
staging.ilgive.com
staging.nhgives.org
staging.nygivesday.org
staging.vermontgives.org
supportadultliteracy.org
*.supportadultliteracy.org
user-content.givegab-cdn.com
www.cunytuesday.org
www.givebigkern.org
www.givedekalbcounty.org
www.givingisgorges.org
www.hhgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.kygives.org
www.nhgives.org
www.nygivesday.org
www.oregoniansgive.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.vermontgives.org
givegab.com
*.canisiusgivingday.com
*.springiton.org
freegivingtuesday.org
*.freegivingtuesday.org
gg-staging.oregoniansgive.org
givingisgorges.org
*.givingisgorges.org
msdayofgiving.org
*.msdayofgiving.org
staging.cunytuesday.org
staging.givingisgorges.org
staging.hhgivingday.org
staging.hvgives.org
staging.ilgive.com
staging.nhgives.org
staging.nygivesday.org
staging.vermontgives.org
supportadultliteracy.org
*.supportadultliteracy.org
user-content.givegab-cdn.com
www.cunytuesday.org
www.givebigkern.org
www.givedekalbcounty.org
www.givingisgorges.org
www.hhgivingday.org
www.hvgives.org
www.idahogives.org
www.ilgive.com
www.kygives.org
www.nhgives.org
www.nygivesday.org
www.oregoniansgive.org
www.theamazinggive.org
www.thebiggivesa.org
www.thebigshare.org
www.vermontgives.org
givegab.com
Other certificates including the domain name givegab.com
(limited to 100 certificates)
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
l.ssl.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
dns-vetting1k.map.fastly.net
*.givegab.com
info.givegab.com
*.givegab.com
*.givegab.com
l.ssl.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
*.givegab.com
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
l.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.givegab.com
*.givegab.com
dns-vetting2.map.fastly.net
l.ssl.fastly.net
Certificate
The complete raw certificate details for *.givegab.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH9TCCBt2gAwIBAgIMNU9CmA/nWZcGViaCMA0GCSqGSIb3DQEBCwUAMFcxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYDVQQDEyRH bG9iYWxTaWduIENsb3VkU1NMIENBIC0gU0hBMjU2IC0gRzMwHhcNMTcwMTA0MTYw NDA0WhcNMTcxMDEyMjAyNTAzWjBbMQswCQYDVQQGEwJVUzELMAkGA1UECAwCTlkx DzANBgNVBAcMBkl0aGFjYTEWMBQGA1UECgwNR2l2ZWdhYiwgSW5jLjEWMBQGA1UE AwwNKi5naXZlZ2FiLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO7F7rv5wYwcopQDX58Jpxs1PwzSNHFZGdQtySYusoSxCcH/s5voyPwU/pTzBbIM /7h0eFYWX5drWxwlgQqIEUK8Xud/Koc9zYuAbVNJpkg+0YE1zjojC2x1kvioRlX5 Cai7PCLc7t/bB3G9OVU3Jtkax5HIDm9jK1HE2s+dnrCi2QeminVP2SyrjvcP+chB VFYQRON0ASqG9pIxilRuBYhz34RCmvIy9KwUr9xSd+xyu83a67k5rTDePbZ2GEzf 5rm3BiIayipQJNOHVinsj/7uIw8jtbjk0gOA4PhlVCDuANxjZlvMl9+R6pL0QKxM r2ykf+TPgueCtMT6m8UMN/UCAwEAAaOCBLswggS3MA4GA1UdDwEB/wQEAwIFoDCB igYIKwYBBQUHAQEEfjB8MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJlLmdsb2Jh bHNpZ24uY29tL2NhY2VydC9jbG91ZHNzbHNoYTJnMy5jcnQwNgYIKwYBBQUHMAGG Kmh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9jbG91ZHNzbHNoYTJnMzBWBgNV HSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADCC A1QGA1UdEQSCA0swggNHgg0qLmdpdmVnYWIuY29tghcqLmNhbmlzaXVzZ2l2aW5n ZGF5LmNvbYIQKi5zcHJpbmdpdG9uLm9yZ4IVZnJlZWdpdmluZ3R1ZXNkYXkub3Jn ghcqLmZyZWVnaXZpbmd0dWVzZGF5Lm9yZ4IdZ2ctc3RhZ2luZy5vcmVnb25pYW5z Z2l2ZS5vcmeCEmdpdmluZ2lzZ29yZ2VzLm9yZ4IUKi5naXZpbmdpc2dvcmdlcy5v cmeCEW1zZGF5b2ZnaXZpbmcub3JnghMqLm1zZGF5b2ZnaXZpbmcub3JnghdzdGFn aW5nLmN1bnl0dWVzZGF5Lm9yZ4Iac3RhZ2luZy5naXZpbmdpc2dvcmdlcy5vcmeC F3N0YWdpbmcuaGhnaXZpbmdkYXkub3JnghNzdGFnaW5nLmh2Z2l2ZXMub3JnghJz dGFnaW5nLmlsZ2l2ZS5jb22CE3N0YWdpbmcubmhnaXZlcy5vcmeCFnN0YWdpbmcu bnlnaXZlc2RheS5vcmeCGHN0YWdpbmcudmVybW9udGdpdmVzLm9yZ4IYc3VwcG9y dGFkdWx0bGl0ZXJhY3kub3JnghoqLnN1cHBvcnRhZHVsdGxpdGVyYWN5Lm9yZ4Ic dXNlci1jb250ZW50LmdpdmVnYWItY2RuLmNvbYITd3d3LmN1bnl0dWVzZGF5Lm9y Z4ITd3d3LmdpdmViaWdrZXJuLm9yZ4IYd3d3LmdpdmVkZWthbGJjb3VudHkub3Jn ghZ3d3cuZ2l2aW5naXNnb3JnZXMub3JnghN3d3cuaGhnaXZpbmdkYXkub3Jngg93 d3cuaHZnaXZlcy5vcmeCEnd3dy5pZGFob2dpdmVzLm9yZ4IOd3d3LmlsZ2l2ZS5j b22CD3d3dy5reWdpdmVzLm9yZ4IPd3d3Lm5oZ2l2ZXMub3JnghJ3d3cubnlnaXZl c2RheS5vcmeCFnd3dy5vcmVnb25pYW5zZ2l2ZS5vcmeCFnd3dy50aGVhbWF6aW5n Z2l2ZS5vcmeCFHd3dy50aGViaWdnaXZlc2Eub3JnghN3d3cudGhlYmlnc2hhcmUu b3JnghR3d3cudmVybW9udGdpdmVzLm9yZ4ILZ2l2ZWdhYi5jb20wHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQD10BfzkeWt8MWYoI4A4xS 4Wi+VzAfBgNVHSMEGDAWgBSpK4fhziRHOxu/z4U3AlWdDZRY5jANBgkqhkiG9w0B AQsFAAOCAQEAkOtAxqp1e+YXifbJskSmanwNOperq6JgYvpzg8wKiZmXcpFbApe9 UAPfl6KygWAkBJ6zpOsWbtVreDpN1uRVNU5GDxbXHiTI2tAuPce4UxCufWsj71V4 J4R/h+EaN7DqiJyBPW7i7SK781wKY0tkoP5iZT73iW3Lqduv8Nj8xRRBYPW7/pEl 1D79Mu9qFvSpnoqZyrIkImQ57X0xZvIVh1Z0EJKMpObMhyZ3W/8I8nuLEK7v11eZ dNoWw6cB64mHm6X8guYjUrf+kDG0uW66I4lLrBN81keLtS0029gwtxuDl6rsMf8n LaDjkY3MT1sQ+sGANJNy/nRllJxFs9/VJQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sXuu/nBjByilANfnwmn GzU/DNI0cVkZ1C3JJi6yhLEJwf+zm+jI/BT+lPMFsgz/uHR4VhZfl2tbHCWBCogR Qrxe538qhz3Ni4BtU0mmSD7RgTXOOiMLbHWS+KhGVfkJqLs8Itzu39sHcb05VTcm 2RrHkcgOb2MrUcTaz52esKLZB6aKdU/ZLKuO9w/5yEFUVhBE43QBKob2kjGKVG4F iHPfhEKa8jL0rBSv3FJ37HK7zdrruTmtMN49tnYYTN/mubcGIhrKKlAk04dWKeyP /u4jDyO1uOTSA4Dg+GVUIO4A3GNmW8yX35HqkvRArEyvbKR/5M+C54K0xPqbxQw3 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16498525141519796083021457026 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-04 16:04:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 20:25:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ithaca' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Givegab, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.givegab.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30142320762934800297786488225521567088103290856426898055296736464865313016096708950800818966647992460474878806036050237038288397486091911145825480238031081978826088143231231795111361587614934689167575891392362842503416403709718748484634090717195373439729909004837806780851450606275042365122503494826638426001302998685254786582060315776664980263581159047568204709348503249124969869009563230316616311801640149851974504227345801056464841389824513064812841039173549212881758425423637457517036681547684341097374234545137930362300032276455021020711999619287664880421328114625964034094835344858996491261614392252454270679029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (843 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canisiusgivingday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springiton.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegivingtuesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegivingtuesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gg-staging.oregoniansgive.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingisgorges.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givingisgorges.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msdayofgiving.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msdayofgiving.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cunytuesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.givingisgorges.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hhgivingday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hvgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ilgive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nhgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nygivesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vermontgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportadultliteracy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportadultliteracy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-content.givegab-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cunytuesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givebigkern.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givedekalbcounty.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingisgorges.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hhgivingday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahogives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kygives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nygivesday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregoniansgive.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamazinggive.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebiggivesa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebigshare.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontgives.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03d7405fce4796b7c316628238038c52e168be57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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