mask.stayclassy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number b9:65:e1:8a:a2:40:3b:d6 was issued on by GoDaddy.com, Inc..

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask.stayclassy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b9:65:e1:8a:a2:40:3b:d6
Serial Number (int): 13359331855208299478
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 65:7a:fb:72:e9:53:80:0b:cd:9b:45:b1:ba:76:40:9c:86:ca:4a:53
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 69:ad:cd:42:6a:b9:db:e2:18:8d:17:39:8a:a0:10:a8:21:bb:b2:df
Fingerprint (sha256): 30:ca:1a:50:a2:b6:17:b7:3a:f5:a5:6b:68:20:d6:82:4b:3e:d1:ee:1f:34:69:5e:5f:c9:03:63:13:a1:3f:c5

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate mask.stayclassy.org

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask.stayclassy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask.stayclassy.org
www.mask.stayclassy.org
my.water1st.org
fundraise.nudm.org
donate.iempathize.org
fundraise.libertyinnorthkorea.org
fundraise.cffde.org
donate.sepsisalliance.org
give.njhealth.org
give.buildaboma.org
fundraise.henryford.com
donate.weareocean.org
fundraise.ucpsd.org
donate.febc.org
my.wfpusa.org
my.mondaylife.org
www.springiton.org
fundraise.jsa.org
my.aif.org
fundraise.pencilsofpromise.org
donate.lifeteen.com
fundraise.dreamscometrue.org
donate.bootcampaign.com
donate.citizensclimateeducationcorp.org
donate.banfieldcharitabletrust.org
give.fightcrc.org
my.letthemlol.com
donate.kindredimage.org
give.athletesforacure.org
give.fimrc.org
support.letsendbullying.org
do.keepachildalive.org
give.worldconcern.org
fundraise.barbellsforboobs.org
fundraise.activeheroes.org
donate.aqua.org
contribute.thenextgeneration.org
fundraise.ccfa.org
give.sisterindia.org
action.keep-a-breast.org
donate.singforhope.org
donate.love146.org
give.thefeedfoundation.org
give.tchabitat.org
support.shininghopeforcommunities.org
donate.myagro.org
my.actionagainsthunger.org
donate.travismanion.org
give.safekids.org
give.acco.org
my.pciglobal.org
impact.lynnecohenfoundation.org
solvehunger.shfb.org
capkdevelopment.capk.org
my.coachart.org
fundraise.outreach-international.org
events.durhamhabitat.org
act.buildon.org
give.mazon.org
givehope.hthf.org
my.oxfamamerica.org
fundraise.worldreader.org
fundraise.teamrubiconusa.org
fundraise.bloodwatermission.com
classyawards.org
fundraise.projectals.org
ourhope.cityofhope.org
www.gvnfundraising.org
impact.wvfoundation.org
www.classyawards.org
fundraise.medicalteams.org
donate.possiblehealth.org
give.kaboom.org
fundraise.projecthopeworldwide.org
give.invisiblechildren.com
my.episcopalrelief.org
fundraising.tugmcgraw.org
fundraising.semperfifund.org
support.la2015.org
fundraise.plantingjustice.org

Other certificates including the domain name stayclassy.org

(limited to 100 certificates)
ssl2114.cloudflare.com
*.classy-test.org
mask2.stayclassy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
classy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
*.classy.org
sni67969.cloudflaressl.com
mask.stayclassy.org
go.stayclassy.org
go.stayclassy.org
ssl2590.cloudflare.com
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
*.int-pay.stayclassy.org
mask2.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
staging.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
ssl2590.cloudflare.com
ssl2590.cloudflare.com
*.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.classy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
mask.stayclassy.org
*.classy-test.org
ssl2114.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
ssl2590.cloudflare.com
go.stayclassy.org
go.stayclassy.org
ssl2114.cloudflare.com
go.stayclassy.org
classy.org
ssl2590.cloudflare.com
ssl2707.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
mask.stayclassy.org
*.classy.org
*.classy-test.org
classy.org
ssl2590.cloudflare.com
mask.stayclassy.org
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
*.stayclassy.org
ssl2590.cloudflare.com
staging.stayclassy.org
mask2.stayclassy.org
mask2.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
classy.org
ssl2707.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.classy-test.org
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
sni67969.cloudflaressl.com

Certificate

The complete raw certificate details for mask.stayclassy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMnzCCC4egAwIBAgIJALll4YqiQDvWMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE1MDMyMzIzMTgzOVoX
DTE4MDIxODE4NDMzOFowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMRwwGgYDVQQDExNtYXNrLnN0YXljbGFzc3kub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAo11udy/xCk+wf0R53YH/E5ENSiESJn792ZtXE3D5
6VwvK8oQkBqyojRXreZgb7sf/mvE+8+6Cu0ws3XNWg9ToNDJTnSilD4RSJSg5pT/
fi1Y+LRxhKcC2SzIjzfNNcERZ7J4dmlSla3r6t2mrA+6TNEsoq47huOFckWuWimH
87/UtLswZ5d3xYVLHJfF/ogZf+1GG/JQwTihKrLCTfA1YrkPJ21fbDqpsq1rRxhE
5z8WoJK8mJ/0V2lTLkeYf9uFHERjN7tmiO9Pt+8zQmc4sthXhsPSRifdHfMZdtYx
cOdRZAaZWoDgWAG3hn1zr380TtxF2xpe0DROxfBeYoAv0wIDAQABo4IJJDCCCSAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYD
VR0PAQH/BAQDAgWgMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jcmwuZ29kYWRk
eS5jb20vZ2RpZzJzMS04Ny5jcmwwUwYDVR0gBEwwSjBIBgtghkgBhv1tAQcXATA5
MDcGCCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3Jl
cG9zaXRvcnkvMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDC
vSeOzDSDMKIz1/tss/C0LIDOMIIHmgYDVR0RBIIHkTCCB42CE21hc2suc3RheWNs
YXNzeS5vcmeCF3d3dy5tYXNrLnN0YXljbGFzc3kub3Jngg9teS53YXRlcjFzdC5v
cmeCEmZ1bmRyYWlzZS5udWRtLm9yZ4IVZG9uYXRlLmllbXBhdGhpemUub3JngiFm
dW5kcmFpc2UubGliZXJ0eWlubm9ydGhrb3JlYS5vcmeCE2Z1bmRyYWlzZS5jZmZk
ZS5vcmeCGWRvbmF0ZS5zZXBzaXNhbGxpYW5jZS5vcmeCEWdpdmUubmpoZWFsdGgu
b3JnghNnaXZlLmJ1aWxkYWJvbWEub3JnghdmdW5kcmFpc2UuaGVucnlmb3JkLmNv
bYIVZG9uYXRlLndlYXJlb2NlYW4ub3JnghNmdW5kcmFpc2UudWNwc2Qub3Jngg9k
b25hdGUuZmViYy5vcmeCDW15LndmcHVzYS5vcmeCEW15Lm1vbmRheWxpZmUub3Jn
ghJ3d3cuc3ByaW5naXRvbi5vcmeCEWZ1bmRyYWlzZS5qc2Eub3JnggpteS5haWYu
b3Jngh5mdW5kcmFpc2UucGVuY2lsc29mcHJvbWlzZS5vcmeCE2RvbmF0ZS5saWZl
dGVlbi5jb22CHGZ1bmRyYWlzZS5kcmVhbXNjb21ldHJ1ZS5vcmeCF2RvbmF0ZS5i
b290Y2FtcGFpZ24uY29tgidkb25hdGUuY2l0aXplbnNjbGltYXRlZWR1Y2F0aW9u
Y29ycC5vcmeCImRvbmF0ZS5iYW5maWVsZGNoYXJpdGFibGV0cnVzdC5vcmeCEWdp
dmUuZmlnaHRjcmMub3JnghFteS5sZXR0aGVtbG9sLmNvbYIXZG9uYXRlLmtpbmRy
ZWRpbWFnZS5vcmeCGWdpdmUuYXRobGV0ZXNmb3JhY3VyZS5vcmeCDmdpdmUuZmlt
cmMub3JnghtzdXBwb3J0LmxldHNlbmRidWxseWluZy5vcmeCFmRvLmtlZXBhY2hp
bGRhbGl2ZS5vcmeCFWdpdmUud29ybGRjb25jZXJuLm9yZ4IeZnVuZHJhaXNlLmJh
cmJlbGxzZm9yYm9vYnMub3JnghpmdW5kcmFpc2UuYWN0aXZlaGVyb2VzLm9yZ4IP
ZG9uYXRlLmFxdWEub3JngiBjb250cmlidXRlLnRoZW5leHRnZW5lcmF0aW9uLm9y
Z4ISZnVuZHJhaXNlLmNjZmEub3JnghRnaXZlLnNpc3RlcmluZGlhLm9yZ4IYYWN0
aW9uLmtlZXAtYS1icmVhc3Qub3JnghZkb25hdGUuc2luZ2ZvcmhvcGUub3JnghJk
b25hdGUubG92ZTE0Ni5vcmeCGmdpdmUudGhlZmVlZGZvdW5kYXRpb24ub3JnghJn
aXZlLnRjaGFiaXRhdC5vcmeCJXN1cHBvcnQuc2hpbmluZ2hvcGVmb3Jjb21tdW5p
dGllcy5vcmeCEWRvbmF0ZS5teWFncm8ub3JnghpteS5hY3Rpb25hZ2FpbnN0aHVu
Z2VyLm9yZ4IXZG9uYXRlLnRyYXZpc21hbmlvbi5vcmeCEWdpdmUuc2FmZWtpZHMu
b3Jngg1naXZlLmFjY28ub3JnghBteS5wY2lnbG9iYWwub3Jngh9pbXBhY3QubHlu
bmVjb2hlbmZvdW5kYXRpb24ub3JnghRzb2x2ZWh1bmdlci5zaGZiLm9yZ4IYY2Fw
a2RldmVsb3BtZW50LmNhcGsub3Jngg9teS5jb2FjaGFydC5vcmeCJGZ1bmRyYWlz
ZS5vdXRyZWFjaC1pbnRlcm5hdGlvbmFsLm9yZ4IYZXZlbnRzLmR1cmhhbWhhYml0
YXQub3Jngg9hY3QuYnVpbGRvbi5vcmeCDmdpdmUubWF6b24ub3JnghFnaXZlaG9w
ZS5odGhmLm9yZ4ITbXkub3hmYW1hbWVyaWNhLm9yZ4IZZnVuZHJhaXNlLndvcmxk
cmVhZGVyLm9yZ4IcZnVuZHJhaXNlLnRlYW1ydWJpY29udXNhLm9yZ4IfZnVuZHJh
aXNlLmJsb29kd2F0ZXJtaXNzaW9uLmNvbYIQY2xhc3N5YXdhcmRzLm9yZ4IYZnVu
ZHJhaXNlLnByb2plY3RhbHMub3JnghZvdXJob3BlLmNpdHlvZmhvcGUub3JnghZ3
d3cuZ3ZuZnVuZHJhaXNpbmcub3JnghdpbXBhY3Qud3Zmb3VuZGF0aW9uLm9yZ4IU
d3d3LmNsYXNzeWF3YXJkcy5vcmeCGmZ1bmRyYWlzZS5tZWRpY2FsdGVhbXMub3Jn
ghlkb25hdGUucG9zc2libGVoZWFsdGgub3Jngg9naXZlLmthYm9vbS5vcmeCImZ1
bmRyYWlzZS5wcm9qZWN0aG9wZXdvcmxkd2lkZS5vcmeCGmdpdmUuaW52aXNpYmxl
Y2hpbGRyZW4uY29tghZteS5lcGlzY29wYWxyZWxpZWYub3JnghlmdW5kcmFpc2lu
Zy50dWdtY2dyYXcub3JnghxmdW5kcmFpc2luZy5zZW1wZXJmaWZ1bmQub3JnghJz
dXBwb3J0LmxhMjAxNS5vcmeCHWZ1bmRyYWlzZS5wbGFudGluZ2p1c3RpY2Uub3Jn
MB0GA1UdDgQWBBRlevty6VOAC82bRbG6dkCchspKUzANBgkqhkiG9w0BAQsFAAOC
AQEAN6cV9Au+iTWC6PokRRdJE/PFo5UlkC4vmyjMea14w3kUBCZfxg+25PD3wkN/
PEVngHPNXGgmSk2VkExQW2sRpckMX4PNo3N8dEHwY+8LUpwm31Vqctqql9yYp5oF
7YsjzbWlPafLMCc1DMmXxyVmhBBUqLvTFh0jZy5tuSF+2gKkeezeeFFHNCKYEqY0
qImKaVB1oMa0EuLmOiHAguR2aQuWIc2Hs9FCdwE9UctbMomD5KyMhfLD61XmqIBZ
OTClBPpXluiksvWwl2UERO3ejrhL2psIoALVzOB5QBVMRp8A2i1bQ4K0k5/gMUIK
upSiNz1O9PCTuVou5iDKUu3MlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11udy/xCk+wf0R53YH/
E5ENSiESJn792ZtXE3D56VwvK8oQkBqyojRXreZgb7sf/mvE+8+6Cu0ws3XNWg9T
oNDJTnSilD4RSJSg5pT/fi1Y+LRxhKcC2SzIjzfNNcERZ7J4dmlSla3r6t2mrA+6
TNEsoq47huOFckWuWimH87/UtLswZ5d3xYVLHJfF/ogZf+1GG/JQwTihKrLCTfA1
YrkPJ21fbDqpsq1rRxhE5z8WoJK8mJ/0V2lTLkeYf9uFHERjN7tmiO9Pt+8zQmc4
sthXhsPSRifdHfMZdtYxcOdRZAaZWoDgWAG3hn1zr380TtxF2xpe0DROxfBeYoAv
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13359331855208299478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-23 23:18:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-18 18:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask.stayclassy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20622916502308320771621715321691805888012050450245595540439030404318111315996025020398777706004001237888641475219966980910585928242450015470715790072191586375299925424915316585195554127551835392683326934197420660287562650638960326011313921570423620415362165493940591075885254884567956885950097874821325397406870812752799855888831112587921444456967473387350977191032224065909304694750241130940316792299926384472031195193882313957406259044655045574199349509315696412068527620491328639330992199221301966026378361696949138507050408747904995060946560068791574089338982662466244583638394553095217499940136074757336507363283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1937 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask.stayclassy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask.stayclassy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.water1st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nudm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iempathize.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.libertyinnorthkorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.cffde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sepsisalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.njhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.buildaboma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.henryford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.weareocean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.ucpsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.febc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wfpusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mondaylife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.jsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.pencilsofpromise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lifeteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.dreamscometrue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bootcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.citizensclimateeducationcorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.banfieldcharitabletrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fightcrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.letthemlol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kindredimage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.athletesforacure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fimrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.letsendbullying.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.keepachildalive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.worldconcern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.barbellsforboobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.activeheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.aqua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.thenextgeneration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.ccfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sisterindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.keep-a-breast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.singforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.love146.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.thefeedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.tchabitat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.shininghopeforcommunities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.myagro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.actionagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.travismanion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.safekids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.acco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pciglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.lynnecohenfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solvehunger.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capkdevelopment.capk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.coachart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.outreach-international.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.durhamhabitat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.buildon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.mazon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givehope.hthf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfamamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.worldreader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.teamrubiconusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.bloodwatermission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classyawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.projectals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhope.cityofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvnfundraising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.wvfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classyawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.medicalteams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.possiblehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.kaboom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.projecthopeworldwide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.invisiblechildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.episcopalrelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.tugmcgraw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.semperfifund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.la2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.plantingjustice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							657afb72e953800bcd9b45b1ba76409c86ca4a53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037a715f40bbe893582e8fa2445174913f3c5a39525902e2f9b28cc79ad78c3791404265fc60fb6e4f0f7c2437f3c45678073cd5c68264a4d95904c505b6b11a5c90c5f83cda3737c7441f063ef0b529c26df556a72daaa97dc98a79a05ed8b23cdb5a53da7cb3027350cc997c72566841054a8bbd3161d23672e6db9217eda02a479ecde78514734229812a634a8898a695075a0c6b412e2e63a21c082e476690b9621cd87b3d14277013d51cb5b328983e4ac8c85f2c3eb55e6a880593930a504fa5796e8a4b2f5b097650444edde8eb84bda9b08a002d5cce07940154c469f00da2d5b4382b4939fe031420aba94a2373d4ef4f093b95a2ee620ca52edcc94