mask3.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number fc:84:1a:1e:08:a8:7f:da was issued on by GoDaddy.com, Inc..

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask3.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:84:1a:1e:08:a8:7f:da
Serial Number (int): 18195697110780248026
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 0c:ae:36:aa:44:d1:fa:aa:0f:ed:e1:c9:eb:fa:d6:f7:df:64:92:60
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 10:34:2b:2a:f5:5e:a1:fc:71:44:fa:14:c5:b5:45:25:81:26:ff:b4
Fingerprint (sha256): 3c:5d:f5:2d:a0:aa:2d:5a:03:ba:31:f3:f7:58:a8:05:1a:69:c4:f6:68:8e:e0:fe:d8:36:2d:d3:6b:ca:03:fc

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate mask3.classy.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask3.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask3.classy.org
www.mask3.classy.org
give.adoptafamily.org
support.firstdescents.org
fundraise.namict.org
support.albertbakerfund.org
givehope.globalgenes.org
support.highfivesfoundation.org
give.franciscanhospital.org
my.thirstproject.org
donate.girlscoutsccs.org
donations.bgcec.org
donate.nationalcherryblossomfestival.org
give.hands.org
donate.walkwithsally.org
donate.foodbanksbc.org
donate.samahope.org
give.cawst.org
donate.safewaternetwork.org
giving.operationgratitude.com
support.fourthdayministries.org
fundraise.avaaz.org
support.childrenscancerrecovery.org
fundraise.dreamerlogix.com
donate.thebreastcancercharities.org
support.cfthinc.org
my.supportlpch.org
fundraise.leaderspark.org
donate.movemeantfoundation.com
give.jhskiclub.org
fundraise.everyday-warrior.org
fundraise.kidneyfund.org
my.orbis.org
act.morethanme.org
donate.yourlocalunitedway.org
fundraise.tofightcancer.com
give.peerhealthexchange.org
membership.nileproject.org
fundraise.salsthon.com
support.yosemitescouting.org
donate.recycledman.com
campaign.onearmenia.org
donate.mission14.org
fundraise.greenberetfoundation.org
give.savelivestogether.org
support.codysfreshstart.org
give.no-hunger.org
contribute.sturge-weber.org
fundraise.kulturecity.org
support.playrugbyusa.com
act.stophungernow.org
giving.mountaincircle.org
donate.missioncontinues.org
my.loverescues.org
give.solutionsforchange.org
fundraise.richmondcf.org
donate.thecollegeinitiative.org
donate.truenorthservices.org
donate.cmhastarttalking.ca
donate.saveawarrior.org
support.cancerrecovery.ca
fundraise.modestofamilypromise.com
donate.peersproject.org
donate.trisomy18.org
donate.fourgirlsforfamilies.org
donate.walkforhope.com
donate.healthebay.org
donate.restorenyc.org
support.blueengine.org
fund.soles4souls.org
fundraise.stvincentmow.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask3.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3oSALggiKnbroMYpU8K
0z+njH23sd1IPOur1fKCyUVZXS7QPvMoCbwX9Rq6UF/VZLk1JcwekIhyBRN42gft
gq93ZiTvtEmpiACSH4QPg21n73NXIZ04EeB2prz4BA8flpUCTAEV3zzd7e+yI2O1
0yXa2eGsCIRsj2Cz0TnQnA0GTloWcVANDKIjyH1/TQt8hZH+8paiec4L5J8ixjmX
5tEE5t9Vq1U/mrLwU1w8Q/MPl4p6r03rWoOztRYDr+j2nqu15UkGbc3yRzq45Ahc
zvTwXMw9XQ+ejKFfGt9POJPF6xE/PNtyPBWMBWntW+xKpGPz4xqF9yKIIurjpE/g
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18195697110780248026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-12 19:00:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 22:58:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask3.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171711368525481826131640131438964734789108973615721931989751067554653387244623244770167467805853443897812894294829413406752140049535380243038638473884993528470777235448488586591042446252596805425265586783057470516714697682619569559404176598896963485008793014273389420573603036536896656010903882681956266029370572056338494448333794840377168919151387315960522047220463491265873122174311249054116688970319816223273273530543763480071189746023445933226565445388033138385076141914229943092467529417013498390009762080890463858099282873727992683052384255811237042504917664584398954527658446868499440787039766760684950380671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1869 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.adoptafamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstdescents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.namict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.albertbakerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givehope.globalgenes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.highfivesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.franciscanhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thirstproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.girlscoutsccs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donations.bgcec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.nationalcherryblossomfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.hands.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkwithsally.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.foodbanksbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.samahope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.cawst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.safewaternetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.operationgratitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fourthdayministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.avaaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.childrenscancerrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.dreamerlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thebreastcancercharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cfthinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.supportlpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.leaderspark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.movemeantfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.jhskiclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everyday-warrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kidneyfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.morethanme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.yourlocalunitedway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.tofightcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.peerhealthexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nileproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.salsthon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yosemitescouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.recycledman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.onearmenia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mission14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.greenberetfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.savelivestogether.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.codysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.no-hunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.sturge-weber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kulturecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.playrugbyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.stophungernow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.mountaincircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missioncontinues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.loverescues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.solutionsforchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.richmondcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thecollegeinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.truenorthservices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cmhastarttalking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.saveawarrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cancerrecovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.modestofamilypromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.peersproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trisomy18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fourgirlsforfamilies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkforhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.healthebay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.restorenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.blueengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.soles4souls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.stvincentmow.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cae36aa44d1faaa0fede1c9ebfad6f7df649260
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095c026dd505fcbefac2da4ea1acb666e778dc32324886a90be7297d4e449b115a43aec45d737fad018907001d4f9e039e2d9aed03410943d89d424082377573adfa5e524b8fd524acd5b71a73cb468d50b1df2334a051d1890e34b142f29840dafaccba36ffc02ca4b58f836fc8e4627b306045c1eee7e1acd72f68b5239ffac655fe12fb5147236f7bf2c63d161db900580a8663bc697a10ed5b032a98c9bad9d4011fed8d54513818a383fa63bf9c631808df57578e16fb40b312b53c9b54efda38cb402be6f48c9bed3bccdbb3607eb6da68607b4bf6459e022a73939ddc8f1cfe9c963b49e7b6ec15661796a46da75f0dd467eff0f59bffef48b8e78ebf1