mask12.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 16:bd:81:ce:49:39:eb:75 was issued on by GoDaddy.com, Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask12.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:bd:81:ce:49:39:eb:75
Serial Number (int): 1638608562424507253
Serial Number lenght: 61 bits, 8 octets

SubjectKeyId: 87:19:2f:eb:fd:00:b4:cb:0b:87:52:3f:8c:a5:db:4e:d9:16:95:cf
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): d0:16:5d:13:ce:fe:4b:49:5f:81:3f:b5:66:f8:e8:37:a8:f7:2c:7d
Fingerprint (sha256): 20:26:7d:94:f5:e0:ee:79:12:d0:21:62:00:04:2a:eb:65:f3:81:74:17:eb:54:c3:cd:46:7b:8b:df:ab:74:e7

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-750.crl

Check the revocation status for certificate mask12.classy.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask12.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask12.classy.org
www.mask12.classy.org
give.aviary.org
donate.strongmissions.com
donate.missionhope.org
donate.idtheftcenter.org
donate.iava.org
donate.mynextbigadventure.org
donate.evidenceaction.org
my.shhkids.org
give.childreneverywhere.org
donate.seedinglabs.org
flashes.givetokent.org
donate.thelovepitrescue.org
fundraise.voa.org
handup.urbanstreetangels.org
gifts.abilitiesfirst.org
impact.americancurefund.org
mo.noshavenovember.co
fundraise.nufoundation.org
give.dcds.edu
fundraise.100blackmen-atlanta.org
donate.booksforkids.org
register.connectedinmotion.ca
fundraise.showhope.org
donate.fscdr.org
fundraise.operationeyesight.com
crowdfunding.maryville.edu
give.gseagles.com
invest.nuleadership.org
support.drinklocalthinkglobal.org
my.movemeantfoundation.org
give.merrickcs.org
give.selamtafamilyproject.org
donate.lwr.org
my.sbfsa.org
give.ijm.org
give.foodrescue.us
givenow.silverbay.org
give.urbanventures.org
donate.sunshinecottage.org
donate.georgetownministrycenter.org
donate.salvationarmysouth.com
impact.grassrootsoccer.org
support.pasopacifico.org
donate.sistersoftheroad.org
fundraise.wearezoe.org
donate.collegetrack.org
fundraise.everywomancan.org
donate.amoshealth.org
donate.ourthreewinners.org
my.superheroheartrun.com
impact.sowa.org
donatenow.discoverycube.org
fundraise.twistedpink.org
give.bcrf.org
donate.legacyyte.org
donate.patientsafetymovement.org
donate.beyondborders.net
fundraise.foodbankonline.org
donate.kidznotes.org
fundraise.thegoodtimesproject.org
donate.dollarfor.org
donate.fairtradecertified.org
fundraise.fonkoze.org
donate.friendsofoutdoorschool.org
donate.daysforgirls.org
give.mlf.org
donate.davidlynchfoundation.org
give.826boston.org
donate.oldspokeshome.com
donate.adrn.org
give.bethedifferencefoundation.org
donate.pavymca.org
donate.code.org
give.suncoastyfc.org
give.thecorporatesource.org
donate.stoptheclot.org
impact.aimhigh.org
give.reformationproject.org
donate.litworld.org
give.kidango.org
fundraise.wateringminds.org
support.honored.org
give.publicintegrity.org
fundraise.raphahouse.org
register.larimerhumane.org
fundraise.beboldbebald.org
donate.animalplace.org
support.youthsolutions.org
give.worldbicyclerelief.org
donate.pbscommunityfoundation.org
give.sevymca.org
www.idsafoundation.org
donate.wildaid.org
donate.iefusa.org
donate.capitalizeforkids.org
donate.aitaf.org
donate.propublica.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask12.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o+LnSgx5NBjlfOO2/0C
lfxRcWWz+m/ABp3z7fL3n/KAV/8B33J4PXEn6vt+TleeGZyDx76h8U0x94zjZLhx
+5FYN3cVIEXu9EYVZIHilxh0Rum3YI2L8QSpvY0LsYRIP7hNHxu0Gk0dQoKifROa
rMOYgj516huH1xdadMBruKPMxzw2Jjj9IWSiFABpfwIiaomWG/Q5RXeVA7PBhbK+
F1kYi0pWIJR+nykbEY5DPE696BhC066BO7cUTqDVx3No5pQXnqLMO9xFFaUt7zuM
1ITzCiZ0SSspVbZ2ekq6liciaOV17FxAPawAvndms3uRT4IYV0MTaeZdrxkT5ZYd
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1638608562424507253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-17 16:14:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 18:07:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask12.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27085782121281442485287670810229836670894928807845895643501787975181771420178517771687555490662854219079628610400315387370072640432201391309750154076576661340456310615791530661373339799827602961852499386968844000127647202753408723546430167409346544675288833112859986338198549924163013349731316913042857129578514356384509973539612239405854088221553394395789219426426168935931720592574353310696574118279311402589150149210766785301626184899043392333852495631073195911106097319743671752516629511778713347434926791439800112942786839304777155167457067500334320884927036274584778939894081394467737564533939139164632855747991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-750.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aviary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.strongmissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missionhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.idtheftcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iava.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mynextbigadventure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.evidenceaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shhkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.childreneverywhere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.seedinglabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashes.givetokent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thelovepitrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.voa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handup.urbanstreetangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.abilitiesfirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.americancurefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.noshavenovember.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.100blackmen-atlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.booksforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.connectedinmotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.showhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fscdr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.operationeyesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.gseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.nuleadership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.drinklocalthinkglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.movemeantfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.merrickcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.selamtafamilyproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lwr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sbfsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ijm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.foodrescue.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givenow.silverbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.urbanventures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sunshinecottage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.georgetownministrycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.salvationarmysouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.grassrootsoccer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pasopacifico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sistersoftheroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wearezoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everywomancan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amoshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ourthreewinners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.superheroheartrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.sowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatenow.discoverycube.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.twistedpink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bcrf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.legacyyte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.patientsafetymovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.beyondborders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.foodbankonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kidznotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.thegoodtimesproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.dollarfor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fairtradecertified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fonkoze.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.friendsofoutdoorschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.daysforgirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.mlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.davidlynchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.826boston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oldspokeshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.adrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bethedifferencefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pavymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.code.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.suncoastyfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.thecorporatesource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.stoptheclot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.aimhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.reformationproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.litworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.kidango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wateringminds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.honored.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.publicintegrity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.raphahouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.larimerhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.beboldbebald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.animalplace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.youthsolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.worldbicyclerelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pbscommunityfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sevymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.wildaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iefusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.capitalizeforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.aitaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.propublica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87192febfd00b4cb0b87523f8ca5db4ed91695cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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