mask11.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 71:50:1e:b1:4c:83:51:af was issued on by GoDaddy.com, Inc..

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask11.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:50:1e:b1:4c:83:51:af
Serial Number (int): 8165059871264428463
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 54:f4:a3:82:98:18:e9:1a:52:43:5e:d5:4f:42:46:9e:16:c5:24:b4
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 18:0b:ee:6d:61:5e:1e:94:f9:c9:5f:b5:e8:13:99:d5:c4:2c:04:ba
Fingerprint (sha256): 09:41:18:a3:27:96:d1:6f:98:46:2f:fc:70:7f:03:53:b2:44:58:61:6a:08:1d:80:c9:a3:86:51:a5:4f:f6:80

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-530.crl

Check the revocation status for certificate mask11.classy.org

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask11.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask11.classy.org
www.mask11.classy.org
beboundless.ashoka.org
give.afcaids.org
donate.thousandcurrents.org
donate.americanprairie.org
donate.voiceofwitness.org
donate.freedomproject.com
give.yambamalawi.org
give.diyalofoundation.org
donate.projectkoru.org
donate.vitaminangels.org
fundraise.wingmanfoundation.org
sunraise.glennon.org
donate.islamicity.org
give.uwkc.org
fundraise.unfoundation.org
fundraise.homefrontwarriorsproject.org
donate.kajokejihealthtraining.org
donate.projectsunshine.org
support.firstbookcanada.org
support.starkeyhearingfoundation.org
fundraise.centralasiainstitute.org
fundraise.hopeoflifeintl.org
impact.chordomafoundation.org
support.project2713.org
donate.taradhatu.net
give.feedingsandiego.org
donate.downtownyorkpa.com
donate.bbbschgo.org
my.strong4sam.org
give.carryingtoterm.org
donate.thesheridanstory.com
donate.spoken.org
makechange.ashoka.org
fundraise.nothingbutnets.net
donate.rickymartinfoundation.org
impact.achanceinlife.org
give.yehudi.today
donate.denovofoundation.org
give.aidventurer.org
donate.goforefront.org
donate.ecorise.org
donate.teamrwb.org
my.eyeheartworld.org
give.roomtoread.org
support.turtleconservancy.org
support.girlsinthegame.org
support.valleyccc.org
act.riseagainsthunger.org
donate.sachamama.org
fundraise.csuinc.org
donate.lapride.org
donate.traffickinginstitute.org
support.theatrewithin.org
fund.109world.com
fundraise.avonbcc.org
give.rmhcsca.org
donate.amurt.gift
impact.specialolympicsva.org
give.conservationnation.org
donate.sepsis.org
donate.cpfe.org
give.onepurse.org
give.farmstew.org
donate.tusk.org
donate.impact247.org
donate.lovewithoutbordersca.org
support.firstbook.org
donate.carrollchristian.com
donate.bootcampaign.org
give.fosterclub.com

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org
mask19.classy.org

Certificate

The complete raw certificate details for mask11.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw57J8Dqhjjv/ej7MaQ2+
E3Fr+oNeqIu3IndmuRhSk+nIFuMihv6tl87o59E7QrEpyZp9IFkQxsOFFxc6QAtw
Pa4M36PSGUikXlOVk1FampnFpUsJc095gx5yekITuhO+vXQth4m7dRflymtyuPFr
v+KbFHFZYuZUFbddLTDQRgzG4pRkaTAWEd/sgRX25JFfeHvCfC3vxssZvZQokUlH
0tK+DEIKL6BTHuTye59c6yvjtlcgwIctVpzfRoKNOnElQdW47R5farIxeI0dQRne
KBStMo0dyBhWDK26NAQGDAP2tFv/e79eqvUEpjhzg5dns5T+LCEVZVv10KUtNj8w
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8165059871264428463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-26 22:41:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 16:27:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask11.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24694771154781485702722907882004612573497497422523583556869580792766225036404839100626719842270918316051272985084993972205361322918964316724348869933937938311363825957194950427539889808190024557129979049328441204941310213135538146747175013113534038658095866504151926631152652783506951169983853898909310204946719238704178767400098482958625562620820904247472523183686198757533059040714270541174623915765703427375474231821319344417919682815837600182351487249353695348194863860417364732781212403497935760055279308332990944501974489660179108047623626992391786703025123999458894645787611803309864807846287999025525238477009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-530.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask11.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask11.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beboundless.ashoka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.afcaids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thousandcurrents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.americanprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.voiceofwitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.freedomproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.yambamalawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.diyalofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.projectkoru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.vitaminangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wingmanfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunraise.glennon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.islamicity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.uwkc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.unfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.homefrontwarriorsproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kajokejihealthtraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.projectsunshine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstbookcanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.starkeyhearingfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.centralasiainstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.hopeoflifeintl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.chordomafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.project2713.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.taradhatu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.feedingsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.downtownyorkpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bbbschgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strong4sam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.carryingtoterm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thesheridanstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.spoken.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makechange.ashoka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nothingbutnets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.rickymartinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.achanceinlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.yehudi.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.denovofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aidventurer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.goforefront.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ecorise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.teamrwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.eyeheartworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.roomtoread.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.turtleconservancy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.girlsinthegame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.valleyccc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.riseagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sachamama.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.csuinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lapride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.traffickinginstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.theatrewithin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.109world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.avonbcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.rmhcsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amurt.gift'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.specialolympicsva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.conservationnation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sepsis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cpfe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.onepurse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.farmstew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.tusk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.impact247.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lovewithoutbordersca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstbook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.carrollchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bootcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fosterclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54f4a3829818e91a52435ed54f42469e16c524b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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