rallybound.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 4d:67:29:de:ff:37:c8:57 was issued on by GoDaddy.com, Inc..

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rallybound.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4d:67:29:de:ff:37:c8:57
Serial Number (int): 5577472701262973015
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 96:3f:48:74:99:9c:1f:a0:04:8e:46:e6:16:53:73:c8:2a:eb:80:69
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 5a:5f:43:02:b8:d3:ef:0b:18:ca:15:4b:06:e9:96:43:f3:a8:b7:18
Fingerprint (sha256): 19:df:94:45:e1:5a:03:df:39:69:13:bc:75:ff:b8:c6:e3:3a:e4:49:bb:a3:82:cf:25:b9:50:2a:07:55:c4:f9

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-18041.crl

Check the revocation status for certificate rallybound.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rallybound.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sf.aidswalk.net
www.rivertovalley.org
foxtrot.michaeljfox.org
www.tourdesimcha.org
www.walkforthewaiting.org
my.habitatsouthernab.ca
www.cycleofsupport.org
www.ysctourdepink.org
support.trisomy18.org
neondogwalk.nevadaspca.org
donaahora.ayuvi.org.gt
donate.biblesociety.ca
for.choc.org
raiseup.choc.org
www.chocpoker.org
fundraise.primaryimmune.org
my.safoodbank.org
communityshift.11daypowerplay.com
tour.cashandrocket.com
sumate.vidawasiperu.org
www.theglobalgala.com
www.raceforautism.org
rallybound.com
www.rallybound.com
www.cmhainmotion.ca
www.mesivtamatching.org
www.teamfriendship.org
support.researchautism.org
my.pawschicago.org
my.jnf.org
kampanie.herosi.eu
campaigns.friendshipcircle.org
fundraise.scottcares.org
www.walk4friendshipboca.com
givemonthly.kidney.org
fundraise.zamaninternational.org
www.aidswalk.net
www.kidneywalk.org
www.leadershiplinks.org
tributes.friendshipcircle.org
unite.commonspirithealthphilanthropy.org
www.thetexastour.org
fundraiser.sesameworkshop.org
dona.facci.org.do
www.chocfollies.org
dona.conanca.org
www.shluchim.fund
events.mlsefoundation.org
support.emdrhap.org
www.thenextride.org
give.guidingeyes.org
donate.accfb.org
www.chocwalk.org
www.bike4chai.com
unite.dignityhealthphilanthropy.org
hope.drugfree.org
www.mysk8.org
www.storiesthatlive.org
www.teamlifeline.org
www.4kidsake.org
give.plancanada.ca
www.teammassey.org
my.lighthousemi.org
www.tourdesummercamps.org
www.anti-cancerchallenge.org
meuapoio.hospitaldeamor.com.br
www.sunrise-walks.org
eventos.salvamivida.org
donaysalvavidas.alccicr.org
unite.chiphilanthropy.org
www.walkforpi.org
www.thecenterrun.org
donar.casadelaamistad.org.mx
www.walkagainsthate.org

Other certificates including the domain name rallybound.com

(limited to 100 certificates)
rallybound.com
rallybound.com
rallybound.com
rallybound.com
discover.rallybound.com
na.srs.status.ricoh.com
rallybound.com
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
na.srs.status.ricoh.com
na.srs.status.ricoh.com
na.srs.status.ricoh.com
*.rallybound.com
go.rallybound.com
na.srs.status.ricoh.com
na.srs.status.ricoh.com
cwa.status.symantec.com
na.srs.status.ricoh.com
na.srs.status.ricoh.com
rallybound.com
rallybound.com
cwa.status.symantec.com
rallybound.com
fixurastatus.mambu.com
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
na.srs.status.ricoh.com
rallybound.com
cwa.status.symantec.com
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
na.srs.status.ricoh.com
*.stage.rallybound.com
rallybound.com
social.rallybound.com
discover.rallybound.com
rallybound.com
rallybound.com
rallybound.com
go.rallybound.com
rallybound.com
na.srs.status.ricoh.com
discover.rallybound.com
rallybound.com
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
cwa.status.symantec.com
na.srs.status.ricoh.com
discover.rallybound.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
cwa.status.symantec.com
rallybound.com
rallybound.com
cwa.status.symantec.com
na.srs.status.ricoh.com
rallybound.com
cwa.status.symantec.com
cwa.status.symantec.com
na.srs.status.ricoh.com
cwa.status.symantec.com
status.alvalabs.io
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
go.rallybound.com
*.rallybound.com
na.srs.status.ricoh.com
rallybound.com
rallybound.com
na.srs.status.ricoh.com
na.srs.status.ricoh.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
cwa.status.symantec.com
rallybound.com
rallybound.com
rallybound.com
rallybound.com
na.srs.status.ricoh.com

Certificate

The complete raw certificate details for rallybound.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX03lQerJjRCZAwqynwz
2vywNka2hAxdO1VC/MlQ0PCISpDJQMeDgudpZsqXwy+4VV7p2pihvw3VJ0trHpdV
+iyOSjlPr8DytWC8jaR0opro4RqJXEe2VDxZ1AvGV232+696vb8y9aR+YV6Fp1qZ
11Uw9PeD2nXrIE0Cu15bFufrsW93IOJa8jGFJ5Z86OQleze90IFgIFyfduHZu92a
jn5gAH9W7ZnEVNNdNMzANPQYAhyk3Yzj24Hgimh95Wo4Wt4SnIL7Eq8aO7ioriDh
7QB14E3xQS8x/khgkvsWVqAo/mg+VtAFW3sKcMotuMTl/somakkBCyEQQTb3LRy8
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5577472701262973015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 16:43:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-13 17:06:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rallybound.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19376207521914771721087765265715775470561149580496772917478355165346590486427621000589411802062805269909114727971849246808349524779416677794138853356036816524294480444184516892281015215694608911446243513789912271958569461156715290683978184732793708362987071163104249574106297399182220868209714069915691273448290263260294194280923924375037335010707629521615048614224676752329420201438769713823732155348750668538108679939161645588906109653793866532703709242333619756918894658379394000149066938709824736287609294110548315322981055560574816005477446015481071589484404772632685083221462709223914771576240927107196907207749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-18041.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.aidswalk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertovalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtrot.michaeljfox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourdesimcha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkforthewaiting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.habitatsouthernab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cycleofsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ysctourdepink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.trisomy18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neondogwalk.nevadaspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donaahora.ayuvi.org.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.biblesociety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'for.choc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiseup.choc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chocpoker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.primaryimmune.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.safoodbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityshift.11daypowerplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tour.cashandrocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumate.vidawasiperu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theglobalgala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raceforautism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rallybound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rallybound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmhainmotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesivtamatching.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamfriendship.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.researchautism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pawschicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jnf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampanie.herosi.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaigns.friendshipcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.scottcares.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walk4friendshipboca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givemonthly.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.zamaninternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aidswalk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidneywalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leadershiplinks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tributes.friendshipcircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unite.commonspirithealthphilanthropy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetexastour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraiser.sesameworkshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dona.facci.org.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chocfollies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dona.conanca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shluchim.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mlsefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.emdrhap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenextride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.guidingeyes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.accfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chocwalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bike4chai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unite.dignityhealthphilanthropy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hope.drugfree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storiesthatlive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamlifeline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4kidsake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.plancanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teammassey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lighthousemi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourdesummercamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anti-cancerchallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuapoio.hospitaldeamor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrise-walks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.salvamivida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donaysalvavidas.alccicr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unite.chiphilanthropy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkforpi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecenterrun.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donar.casadelaamistad.org.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkagainsthate.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							963f4874999c1fa0048e46e6165373c82aeb8069
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dfae6a87b0000040300483046022100a798de942de44570cdd997da78a7768971b742b83d7c4236c9b9b702910e2f3f022100dfd7c7b52901b91a5f562940c8fb00f4f1149f6cb37a22ed94841faeb6fc97af00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dfae6a9190000040300473045022100a471cea6bc064a81f502b05734cfba4fa3c06bb85dfef1116772e8eb578c736602200bea2d39666cbdbfdc7b2f9daafb4217e6b8083c71c05bf2492994f66ee1eb16007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dfae6a9800000040300483046022100c45a15ad884dd63521a7db75f4dc3e38a529190dac629a5d36df5a1e0d817b3d022100b8455be6011980096a1f7f5771b30a5c7d8fd6c317b89f1dec5e04276f402388
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000deb85b2382da43601fcd00ec640c7889cecd959852069bbe05eac6dabf19500eba48785f38549b1b31bbd0138099559001b4fb63349bc9c1ce36aea441b0b20fde344841d10971a72c613786009dd052bc31ab7b68b4c136d5dda9ab8c5ee473abfdee558c2e65386aab3500a99d6fb18fc397c788b6ae77c37bcf95d8ea29ec59aa2b844a351bc0ea31ec9b6ed3fd61123cde891c6760b2c8983d0b7c0c12b9c8552c58e90d25d01885a58883330aaa006a3a2695f73e6a7ef847696ab71819300a92973d40a8410c6b92a8a31ae95b177755294435b85f84b59fddd387e6f69196490936eba1ef01a8950205cf27ac479f21b47ad811d8152b1b02a26f718