mask12.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 5c:df:b4:76:7a:fe:e5 was issued on by GoDaddy.com, Inc..

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask12.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:df:b4:76:7a:fe:e5
Serial Number (int): 26141664032259813
Serial Number lenght: 55 bits, 7 octets

SubjectKeyId: 87:19:2f:eb:fd:00:b4:cb:0b:87:52:3f:8c:a5:db:4e:d9:16:95:cf
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): d4:37:29:ec:21:02:73:e7:89:16:53:a3:58:e1:c1:99:8b:72:b8:62
Fingerprint (sha256): 11:ed:25:c2:96:82:11:1a:56:c6:cf:aa:8a:36:2b:ff:0c:15:a1:4f:a4:ce:16:ac:93:80:a3:6e:d8:2b:e8:cb

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-725.crl

Check the revocation status for certificate mask12.classy.org

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask12.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask12.classy.org
www.mask12.classy.org
register.larimerhumane.org
fundraise.thegoodtimesproject.org
donate.kidznotes.org
fundraise.everywomancan.org
donate.collegetrack.org
fundraise.foodbankonline.org
fundraise.wearezoe.org
donate.beyondborders.net
donate.friendsofoutdoorschool.org
impact.sowa.org
my.superheroheartrun.com
fundraise.fonkoze.org
donate.dollarfor.org
donate.ourthreewinners.org
donate.patientsafetymovement.org
give.bcrf.org
give.reformationproject.org
flashes.givetokent.org
donate.seedinglabs.org
impact.aimhigh.org
fundraise.raphahouse.org
give.childreneverywhere.org
impact.americancurefund.org
support.honored.org
fundraise.wateringminds.org
support.youthsolutions.org
donate.animalplace.org
gifts.abilitiesfirst.org
fundraise.beboldbebald.org
donate.sistersoftheroad.org
support.pasopacifico.org
impact.grassrootsoccer.org
donate.pbscommunityfoundation.org
support.drinklocalthinkglobal.org
give.foodrescue.us
give.ijm.org
donate.aitaf.org
donate.capitalizeforkids.org
donate.iefusa.org
donate.wildaid.org
donate.propublica.org
fundraise.twistedpink.org
donate.davidlynchfoundation.org
invest.nuleadership.org
give.gseagles.com
crowdfunding.maryville.edu
give.mlf.org
donate.daysforgirls.org
donate.pavymca.org
give.bethedifferencefoundation.org
give.selamtafamilyproject.org
donate.adrn.org
give.merrickcs.org
donate.oldspokeshome.com
www.idsafoundation.org
give.sevymca.org
my.movemeantfoundation.org
givenow.silverbay.org
register.connectedinmotion.ca
donate.booksforkids.org
donate.stoptheclot.org
give.thecorporatesource.org
donate.missionhope.org
donate.strongmissions.com
give.aviary.org
give.suncoastyfc.org
donate.code.org
my.shhkids.org
donate.evidenceaction.org
give.kidango.org
donate.litworld.org
donate.mynextbigadventure.org
donate.thelovepitrescue.org
fundraise.100blackmen-atlanta.org
give.dcds.edu
fundraise.nufoundation.org
donate.georgetownministrycenter.org
donate.sunshinecottage.org
mo.noshavenovember.co
donate.fscdr.org
give.urbanventures.org
fundraise.showhope.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org
mask19.classy.org

Certificate

The complete raw certificate details for mask12.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINTDCCDDSgAwIBAgIHXN+0dnr+5TANBgkqhkiG9w0BAQsFADCBtDELMAkGA1UE
BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY
BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMS0wKwYDVQQLEyRodHRwOi8vY2VydHMu
Z29kYWRkeS5jb20vcmVwb3NpdG9yeS8xMzAxBgNVBAMTKkdvIERhZGR5IFNlY3Vy
ZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBHMjAeFw0xNzEwMDIyMjQwMDFaFw0y
MDA2MjAxODA3MDJaMD8xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl
ZDEaMBgGA1UEAxMRbWFzazEyLmNsYXNzeS5vcmcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWj4udKDHk0GOV847b/QKV/FFxZbP6b8AGnfPt8vef8oBX
/wHfcng9cSfq+35OV54ZnIPHvqHxTTH3jONkuHH7kVg3dxUgRe70RhVkgeKXGHRG
6bdgjYvxBKm9jQuxhEg/uE0fG7QaTR1CgqJ9E5qsw5iCPnXqG4fXF1p0wGu4o8zH
PDYmOP0hZKIUAGl/AiJqiZYb9DlFd5UDs8GFsr4XWRiLSlYglH6fKRsRjkM8Tr3o
GELTroE7txROoNXHc2jmlBeeosw73EUVpS3vO4zUhPMKJnRJKylVtnZ6SrqWJyJo
5XXsXEA9rAC+d2aze5FPghhXQxNp5l2vGRPllh2XAgMBAAGjggnVMIIJ0TAMBgNV
HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8B
Af8EBAMCBaAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5nb2RhZGR5LmNv
bS9nZGlnMnMxLTcyNS5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcG
CCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRp
ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSME
GDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjCCCEAGA1UdEQSCCDcwgggzghFtYXNr
MTIuY2xhc3N5Lm9yZ4IVd3d3Lm1hc2sxMi5jbGFzc3kub3JnghpyZWdpc3Rlci5s
YXJpbWVyaHVtYW5lLm9yZ4IhZnVuZHJhaXNlLnRoZWdvb2R0aW1lc3Byb2plY3Qu
b3JnghRkb25hdGUua2lkem5vdGVzLm9yZ4IbZnVuZHJhaXNlLmV2ZXJ5d29tYW5j
YW4ub3Jnghdkb25hdGUuY29sbGVnZXRyYWNrLm9yZ4IcZnVuZHJhaXNlLmZvb2Ri
YW5rb25saW5lLm9yZ4IWZnVuZHJhaXNlLndlYXJlem9lLm9yZ4IYZG9uYXRlLmJl
eW9uZGJvcmRlcnMubmV0giFkb25hdGUuZnJpZW5kc29mb3V0ZG9vcnNjaG9vbC5v
cmeCD2ltcGFjdC5zb3dhLm9yZ4IYbXkuc3VwZXJoZXJvaGVhcnRydW4uY29tghVm
dW5kcmFpc2UuZm9ua296ZS5vcmeCFGRvbmF0ZS5kb2xsYXJmb3Iub3Jnghpkb25h
dGUub3VydGhyZWV3aW5uZXJzLm9yZ4IgZG9uYXRlLnBhdGllbnRzYWZldHltb3Zl
bWVudC5vcmeCDWdpdmUuYmNyZi5vcmeCG2dpdmUucmVmb3JtYXRpb25wcm9qZWN0
Lm9yZ4IWZmxhc2hlcy5naXZldG9rZW50Lm9yZ4IWZG9uYXRlLnNlZWRpbmdsYWJz
Lm9yZ4ISaW1wYWN0LmFpbWhpZ2gub3JnghhmdW5kcmFpc2UucmFwaGFob3VzZS5v
cmeCG2dpdmUuY2hpbGRyZW5ldmVyeXdoZXJlLm9yZ4IbaW1wYWN0LmFtZXJpY2Fu
Y3VyZWZ1bmQub3JnghNzdXBwb3J0Lmhvbm9yZWQub3JnghtmdW5kcmFpc2Uud2F0
ZXJpbmdtaW5kcy5vcmeCGnN1cHBvcnQueW91dGhzb2x1dGlvbnMub3JnghZkb25h
dGUuYW5pbWFscGxhY2Uub3JnghhnaWZ0cy5hYmlsaXRpZXNmaXJzdC5vcmeCGmZ1
bmRyYWlzZS5iZWJvbGRiZWJhbGQub3Jnghtkb25hdGUuc2lzdGVyc29mdGhlcm9h
ZC5vcmeCGHN1cHBvcnQucGFzb3BhY2lmaWNvLm9yZ4IaaW1wYWN0LmdyYXNzcm9v
dHNvY2Nlci5vcmeCIWRvbmF0ZS5wYnNjb21tdW5pdHlmb3VuZGF0aW9uLm9yZ4Ih
c3VwcG9ydC5kcmlua2xvY2FsdGhpbmtnbG9iYWwub3JnghJnaXZlLmZvb2RyZXNj
dWUudXOCDGdpdmUuaWptLm9yZ4IQZG9uYXRlLmFpdGFmLm9yZ4IcZG9uYXRlLmNh
cGl0YWxpemVmb3JraWRzLm9yZ4IRZG9uYXRlLmllZnVzYS5vcmeCEmRvbmF0ZS53
aWxkYWlkLm9yZ4IVZG9uYXRlLnByb3B1YmxpY2Eub3JnghlmdW5kcmFpc2UudHdp
c3RlZHBpbmsub3Jngh9kb25hdGUuZGF2aWRseW5jaGZvdW5kYXRpb24ub3Jnghdp
bnZlc3QubnVsZWFkZXJzaGlwLm9yZ4IRZ2l2ZS5nc2VhZ2xlcy5jb22CGmNyb3dk
ZnVuZGluZy5tYXJ5dmlsbGUuZWR1ggxnaXZlLm1sZi5vcmeCF2RvbmF0ZS5kYXlz
Zm9yZ2lybHMub3JnghJkb25hdGUucGF2eW1jYS5vcmeCImdpdmUuYmV0aGVkaWZm
ZXJlbmNlZm91bmRhdGlvbi5vcmeCHWdpdmUuc2VsYW10YWZhbWlseXByb2plY3Qu
b3Jngg9kb25hdGUuYWRybi5vcmeCEmdpdmUubWVycmlja2NzLm9yZ4IYZG9uYXRl
Lm9sZHNwb2tlc2hvbWUuY29tghZ3d3cuaWRzYWZvdW5kYXRpb24ub3JnghBnaXZl
LnNldnltY2Eub3JnghpteS5tb3ZlbWVhbnRmb3VuZGF0aW9uLm9yZ4IVZ2l2ZW5v
dy5zaWx2ZXJiYXkub3Jngh1yZWdpc3Rlci5jb25uZWN0ZWRpbm1vdGlvbi5jYYIX
ZG9uYXRlLmJvb2tzZm9ya2lkcy5vcmeCFmRvbmF0ZS5zdG9wdGhlY2xvdC5vcmeC
G2dpdmUudGhlY29ycG9yYXRlc291cmNlLm9yZ4IWZG9uYXRlLm1pc3Npb25ob3Bl
Lm9yZ4IZZG9uYXRlLnN0cm9uZ21pc3Npb25zLmNvbYIPZ2l2ZS5hdmlhcnkub3Jn
ghRnaXZlLnN1bmNvYXN0eWZjLm9yZ4IPZG9uYXRlLmNvZGUub3Jngg5teS5zaGhr
aWRzLm9yZ4IZZG9uYXRlLmV2aWRlbmNlYWN0aW9uLm9yZ4IQZ2l2ZS5raWRhbmdv
Lm9yZ4ITZG9uYXRlLmxpdHdvcmxkLm9yZ4IdZG9uYXRlLm15bmV4dGJpZ2FkdmVu
dHVyZS5vcmeCG2RvbmF0ZS50aGVsb3ZlcGl0cmVzY3VlLm9yZ4IhZnVuZHJhaXNl
LjEwMGJsYWNrbWVuLWF0bGFudGEub3Jngg1naXZlLmRjZHMuZWR1ghpmdW5kcmFp
c2UubnVmb3VuZGF0aW9uLm9yZ4IjZG9uYXRlLmdlb3JnZXRvd25taW5pc3RyeWNl
bnRlci5vcmeCGmRvbmF0ZS5zdW5zaGluZWNvdHRhZ2Uub3JnghVtby5ub3NoYXZl
bm92ZW1iZXIuY2+CEGRvbmF0ZS5mc2Nkci5vcmeCFmdpdmUudXJiYW52ZW50dXJl
cy5vcmeCFmZ1bmRyYWlzZS5zaG93aG9wZS5vcmcwHQYDVR0OBBYEFIcZL+v9ALTL
C4dSP4yl207ZFpXPMA0GCSqGSIb3DQEBCwUAA4IBAQBzPMHV172HD8qAzc7o43n2
Kp/o593OTAXyVnH7mRGrbX9CsUoxyvkvecC+JGbwBohu0dflUeI4ZdWbDrLFGSUM
y1/ifRaohXl8gYxQPPEmWlcs2p5W5OOaD0zQf4qM5DnAJedxjC4N4tVqz12ZVYL/
Nr4WAGXHHHF5DtZyljBxF+dyi7JVtJNF4nN9RpdeIevt86WpY82Chj4tjN1FX3tP
auVV6ZRY81UxLJxTSV8sn0kMOShr07n9n2RWivQ2IUkoehJxEo6pwU8AsdrOxouK
4gy4EkWIFHBrk+d0YAoY/1A0oOeqfWJ2lKj9/VX68dFPXxjdsEoD7AxigZ7E9LXM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o+LnSgx5NBjlfOO2/0C
lfxRcWWz+m/ABp3z7fL3n/KAV/8B33J4PXEn6vt+TleeGZyDx76h8U0x94zjZLhx
+5FYN3cVIEXu9EYVZIHilxh0Rum3YI2L8QSpvY0LsYRIP7hNHxu0Gk0dQoKifROa
rMOYgj516huH1xdadMBruKPMxzw2Jjj9IWSiFABpfwIiaomWG/Q5RXeVA7PBhbK+
F1kYi0pWIJR+nykbEY5DPE696BhC066BO7cUTqDVx3No5pQXnqLMO9xFFaUt7zuM
1ITzCiZ0SSspVbZ2ekq6liciaOV17FxAPawAvndms3uRT4IYV0MTaeZdrxkT5ZYd
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26141664032259813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-02 22:40:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 18:07:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask12.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27085782121281442485287670810229836670894928807845895643501787975181771420178517771687555490662854219079628610400315387370072640432201391309750154076576661340456310615791530661373339799827602961852499386968844000127647202753408723546430167409346544675288833112859986338198549924163013349731316913042857129578514356384509973539612239405854088221553394395789219426426168935931720592574353310696574118279311402589150149210766785301626184899043392333852495631073195911106097319743671752516629511778713347434926791439800112942786839304777155167457067500334320884927036274584778939894081394467737564533939139164632855747991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-725.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.larimerhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.thegoodtimesproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kidznotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everywomancan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.foodbankonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wearezoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.beyondborders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.friendsofoutdoorschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.sowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.superheroheartrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fonkoze.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.dollarfor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ourthreewinners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.patientsafetymovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bcrf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.reformationproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashes.givetokent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.seedinglabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.aimhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.raphahouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.childreneverywhere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.americancurefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.honored.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wateringminds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.youthsolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.animalplace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.abilitiesfirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.beboldbebald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sistersoftheroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pasopacifico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.grassrootsoccer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pbscommunityfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.drinklocalthinkglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.foodrescue.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ijm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.aitaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.capitalizeforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iefusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.wildaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.propublica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.twistedpink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.davidlynchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.nuleadership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.gseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.mlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.daysforgirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pavymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bethedifferencefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.selamtafamilyproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.adrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.merrickcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oldspokeshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sevymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.movemeantfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givenow.silverbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.connectedinmotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.booksforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.stoptheclot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.thecorporatesource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missionhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.strongmissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aviary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.suncoastyfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.code.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shhkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.evidenceaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.kidango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.litworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mynextbigadventure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thelovepitrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.100blackmen-atlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.georgetownministrycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sunshinecottage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.noshavenovember.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fscdr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.urbanventures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.showhope.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87192febfd00b4cb0b87523f8ca5db4ed91695cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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