mask3.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number e2:e1:8a:64:5a:62:48:a6 was issued on by GoDaddy.com, Inc..

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask3.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e2:e1:8a:64:5a:62:48:a6
Serial Number (int): 16348500285949364390
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 0c:ae:36:aa:44:d1:fa:aa:0f:ed:e1:c9:eb:fa:d6:f7:df:64:92:60
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 5e:ec:08:fc:23:db:7b:cf:02:f2:3f:c2:9f:75:fa:49:57:4d:86:74
Fingerprint (sha256): 34:ea:b0:e0:4f:03:bd:ad:f1:0a:a4:a3:7b:eb:43:52:68:a8:d9:a2:82:b6:7e:83:58:ee:dd:ed:f4:69:ac:4a

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate mask3.classy.org

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask3.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask3.classy.org
www.mask3.classy.org
give.adoptafamily.org
support.firstdescents.org
fundraise.namict.org
support.albertbakerfund.org
givehope.globalgenes.org
support.highfivesfoundation.org
give.franciscanhospital.org
my.thirstproject.org
donate.girlscoutsccs.org
donations.bgcec.org
donate.nationalcherryblossomfestival.org
give2.gozoe.org
give.hands.org
donate.walkwithsally.org
donate.foodbanksbc.org
fundraise.thelastwell.org
donate.samahope.org
give.cawst.org
donate.safewaternetwork.org
give.miraclefoundation.org
giving.operationgratitude.com
support.fourthdayministries.org
fundraise.avaaz.org
support.childrenscancerrecovery.org
support.everymothercounts.org
donate.curechm.org
fundraise.dreamerlogix.com
donate.thebreastcancercharities.org
support.bcef.org
support.cfthinc.org
fundraising.cedarlake.org
my.supportlpch.org
fundraise.leaderspark.org
donate.movemeantfoundation.com
donate.greatlibrariescreate.org
give.jhskiclub.org
fundraise.everyday-warrior.org
impact.healthcorps.org
fundraise.kidneyfund.org
my.orbis.org
act.morethanme.org
donate.yourlocalunitedway.org
give.peerhealthexchange.org
fundraise.tofightcancer.com
membership.nileproject.org
fundraise.salsthon.com
support.yosemitescouting.org
donate.recycledman.com
donate.mission14.org
campaign.onearmenia.org
fundraise.greenberetfoundation.org
give.savelivestogether.org
give.no-hunger.org
support.codysfreshstart.org
fundraise.kulturecity.org
contribute.sturge-weber.org
support.playrugbyusa.com
act.stophungernow.org
giving.mountaincircle.org
donate.playworks.org
donate.missioncontinues.org
my.loverescues.org
teamforce.facingourrisk.org
give.solutionsforchange.org
fundraise.richmondcf.org
donate.thecollegeinitiative.org
donate.truenorthservices.org
donate.cmhastarttalking.ca
donate.saveawarrior.org
support.cancerrecovery.ca
fundraise.modestofamilypromise.com
donate.peersproject.org
donate.trisomy18.org
champions.foodforthepoor.org
donate.fourgirlsforfamilies.org
donate.walkforhope.com
donate.healthebay.org
donate.restorenyc.org
support.blueengine.org
fund.soles4souls.org
fundraise.stvincentmow.org
support.homeboyindustries.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask3.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3oSALggiKnbroMYpU8K
0z+njH23sd1IPOur1fKCyUVZXS7QPvMoCbwX9Rq6UF/VZLk1JcwekIhyBRN42gft
gq93ZiTvtEmpiACSH4QPg21n73NXIZ04EeB2prz4BA8flpUCTAEV3zzd7e+yI2O1
0yXa2eGsCIRsj2Cz0TnQnA0GTloWcVANDKIjyH1/TQt8hZH+8paiec4L5J8ixjmX
5tEE5t9Vq1U/mrLwU1w8Q/MPl4p6r03rWoOztRYDr+j2nqu15UkGbc3yRzq45Ahc
zvTwXMw9XQ+ejKFfGt9POJPF6xE/PNtyPBWMBWntW+xKpGPz4xqF9yKIIurjpE/g
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16348500285949364390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-09 18:12:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 22:58:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask3.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171711368525481826131640131438964734789108973615721931989751067554653387244623244770167467805853443897812894294829413406752140049535380243038638473884993528470777235448488586591042446252596805425265586783057470516714697682619569559404176598896963485008793014273389420573603036536896656010903882681956266029370572056338494448333794840377168919151387315960522047220463491265873122174311249054116688970319816223273273530543763480071189746023445933226565445388033138385076141914229943092467529417013498390009762080890463858099282873727992683052384255811237042504917664584398954527658446868499440787039766760684950380671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.adoptafamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstdescents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.namict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.albertbakerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givehope.globalgenes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.highfivesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.franciscanhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thirstproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.girlscoutsccs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donations.bgcec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.nationalcherryblossomfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give2.gozoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.hands.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkwithsally.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.foodbanksbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.thelastwell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.samahope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.cawst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.safewaternetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.miraclefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.operationgratitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fourthdayministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.avaaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.childrenscancerrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.everymothercounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.curechm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.dreamerlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thebreastcancercharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bcef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cfthinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.supportlpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.leaderspark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.movemeantfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.greatlibrariescreate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.jhskiclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everyday-warrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.healthcorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kidneyfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.morethanme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.yourlocalunitedway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.peerhealthexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.tofightcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nileproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.salsthon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yosemitescouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.recycledman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mission14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.onearmenia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.greenberetfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.savelivestogether.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.no-hunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.codysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kulturecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.sturge-weber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.playrugbyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.stophungernow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.mountaincircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.playworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missioncontinues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.loverescues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamforce.facingourrisk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.solutionsforchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.richmondcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thecollegeinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.truenorthservices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cmhastarttalking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.saveawarrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cancerrecovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.modestofamilypromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.peersproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trisomy18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champions.foodforthepoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fourgirlsforfamilies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkforhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.healthebay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.restorenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.blueengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.soles4souls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.stvincentmow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.homeboyindustries.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cae36aa44d1faaa0fede1c9ebfad6f7df649260
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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