mask.stayclassy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 2f:db:3c:14:74:7a:b3:76 was issued on by GoDaddy.com, Inc..

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask.stayclassy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:db:3c:14:74:7a:b3:76
Serial Number (int): 3448415998233457526
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 65:7a:fb:72:e9:53:80:0b:cd:9b:45:b1:ba:76:40:9c:86:ca:4a:53
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 1c:f2:41:a3:0f:99:4f:1b:ce:87:a8:61:e3:00:f2:fb:a3:03:bd:2f
Fingerprint (sha256): 3d:78:60:14:74:93:71:fa:f8:80:e9:ca:eb:46:a4:c7:84:07:ef:14:0b:3f:5e:a7:5b:6f:50:bf:43:f7:0a:a5

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-108.crl

Check the revocation status for certificate mask.stayclassy.org

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask.stayclassy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask.stayclassy.org
www.mask.stayclassy.org
my.water1st.org
fundraise.nudm.org
my.truecolorsfund.org
donate.iempathize.org
fundraise.libertyinnorthkorea.org
fundraise.cffde.org
donate.sepsisalliance.org
give.njhealth.org
give.buildaboma.org
fundraise.henryford.com
donate.weareocean.org
donate.youthspeaks.org
fundraise.ucpsd.org
mask.classy.org
donate.febc.org
my.wfpusa.org
my.mondaylife.org
www.springiton.org
fundraise.jsa.org
my.aif.org
fundraise.pencilsofpromise.org
donate.lifeteen.com
fundraise.dreamscometrue.org
donate.bootcampaign.com
donate.banfieldcharitabletrust.org
donate.citizensclimateeducationcorp.org
give.fightcrc.org
my.letthemlol.com
donate.kindredimage.org
give.athletesforacure.org
give.fimrc.org
support.letsendbullying.org
do.keepachildalive.org
give.worldconcern.org
fundraise.barbellsforboobs.org
fundraise.activeheroes.org
donate.aqua.org
contribute.thenextgeneration.org
fundraise.ccfa.org
give.sisterindia.org
action.keep-a-breast.org
donate.singforhope.org
donate.love146.org
give.thefeedfoundation.org
give.tchabitat.org
support.shininghopeforcommunities.org
donate.myagro.org
my.actionagainsthunger.org
donate.travismanion.org
give.safekids.org
give.acco.org
my.pciglobal.org
impact.lynnecohenfoundation.org
solvehunger.shfb.org
capkdevelopment.capk.org
my.coachart.org
fundraise.outreach-international.org
events.durhamhabitat.org
act.buildon.org
give.mazon.org
givehope.hthf.org
my.oxfamamerica.org
fundraise.worldreader.org
fundraise.teamrubiconusa.org
fundraise.bloodwatermission.com
classyawards.org
fundraise.projectals.org
ourhope.cityofhope.org
www.gvnfundraising.org
impact.wvfoundation.org
www.classyawards.org
fundraise.medicalteams.org
donate.possiblehealth.org
give.kaboom.org
fundraise.projecthopeworldwide.org
give.invisiblechildren.com
my.episcopalrelief.org
fundraising.tugmcgraw.org
fundraising.semperfifund.org
support.la2015.org
fundraise.plantingjustice.org

Other certificates including the domain name stayclassy.org

(limited to 100 certificates)
ssl2114.cloudflare.com
*.classy-test.org
mask2.stayclassy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
classy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
*.classy.org
sni67969.cloudflaressl.com
mask.stayclassy.org
go.stayclassy.org
go.stayclassy.org
ssl2590.cloudflare.com
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
*.int-pay.stayclassy.org
mask2.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
staging.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
ssl2590.cloudflare.com
ssl2590.cloudflare.com
*.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.classy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
mask.stayclassy.org
*.classy-test.org
ssl2114.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
ssl2590.cloudflare.com
go.stayclassy.org
go.stayclassy.org
ssl2114.cloudflare.com
go.stayclassy.org
classy.org
ssl2590.cloudflare.com
ssl2707.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
mask.stayclassy.org
*.classy.org
*.classy-test.org
classy.org
ssl2590.cloudflare.com
mask.stayclassy.org
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
*.stayclassy.org
ssl2590.cloudflare.com
staging.stayclassy.org
mask2.stayclassy.org
mask2.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
classy.org
ssl2707.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.classy-test.org
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
sni67969.cloudflaressl.com

Certificate

The complete raw certificate details for mask.stayclassy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11udy/xCk+wf0R53YH/
E5ENSiESJn792ZtXE3D56VwvK8oQkBqyojRXreZgb7sf/mvE+8+6Cu0ws3XNWg9T
oNDJTnSilD4RSJSg5pT/fi1Y+LRxhKcC2SzIjzfNNcERZ7J4dmlSla3r6t2mrA+6
TNEsoq47huOFckWuWimH87/UtLswZ5d3xYVLHJfF/ogZf+1GG/JQwTihKrLCTfA1
YrkPJ21fbDqpsq1rRxhE5z8WoJK8mJ/0V2lTLkeYf9uFHERjN7tmiO9Pt+8zQmc4
sthXhsPSRifdHfMZdtYxcOdRZAaZWoDgWAG3hn1zr380TtxF2xpe0DROxfBeYoAv
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3448415998233457526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-14 23:17:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-18 18:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask.stayclassy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20622916502308320771621715321691805888012050450245595540439030404318111315996025020398777706004001237888641475219966980910585928242450015470715790072191586375299925424915316585195554127551835392683326934197420660287562650638960326011313921570423620415362165493940591075885254884567956885950097874821325397406870812752799855888831112587921444456967473387350977191032224065909304694750241130940316792299926384472031195193882313957406259044655045574199349509315696412068527620491328639330992199221301966026378361696949138507050408747904995060946560068791574089338982662466244583638394553095217499940136074757336507363283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-108.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2001 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask.stayclassy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask.stayclassy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.water1st.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nudm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.truecolorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iempathize.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.libertyinnorthkorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.cffde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sepsisalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.njhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.buildaboma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.henryford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.weareocean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.youthspeaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.ucpsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.febc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wfpusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mondaylife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springiton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.jsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aif.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.pencilsofpromise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lifeteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.dreamscometrue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bootcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.banfieldcharitabletrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.citizensclimateeducationcorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fightcrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.letthemlol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kindredimage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.athletesforacure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fimrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.letsendbullying.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do.keepachildalive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.worldconcern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.barbellsforboobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.activeheroes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.aqua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.thenextgeneration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.ccfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sisterindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.keep-a-breast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.singforhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.love146.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.thefeedfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.tchabitat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.shininghopeforcommunities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.myagro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.actionagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.travismanion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.safekids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.acco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pciglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.lynnecohenfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solvehunger.shfb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capkdevelopment.capk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.coachart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.outreach-international.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.durhamhabitat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.buildon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.mazon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givehope.hthf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfamamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.worldreader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.teamrubiconusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.bloodwatermission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classyawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.projectals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhope.cityofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gvnfundraising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.wvfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classyawards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.medicalteams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.possiblehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.kaboom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.projecthopeworldwide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.invisiblechildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.episcopalrelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.tugmcgraw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.semperfifund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.la2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.plantingjustice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							657afb72e953800bcd9b45b1ba76409c86ca4a53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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