mask3.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 84:cf:b0:ee:91:c3:7c:e2 was issued on by GoDaddy.com, Inc..

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask3.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 84:cf:b0:ee:91:c3:7c:e2
Serial Number (int): 9570062271879806178
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 0c:ae:36:aa:44:d1:fa:aa:0f:ed:e1:c9:eb:fa:d6:f7:df:64:92:60
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 55:a1:f9:2a:cd:05:39:43:9d:22:97:d1:57:52:1d:27:c5:b3:f9:b5
Fingerprint (sha256): 43:32:31:62:64:85:11:92:ee:ef:60:31:7e:e0:f9:57:89:d6:74:e1:12:58:0e:fa:69:a2:ca:6d:d4:2a:f8:fc

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-87.crl

Check the revocation status for certificate mask3.classy.org

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask3.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask3.classy.org
www.mask3.classy.org
give.adoptafamily.org
support.firstdescents.org
fundraise.namict.org
support.albertbakerfund.org
givehope.globalgenes.org
support.highfivesfoundation.org
give.franciscanhospital.org
my.thirstproject.org
donate.girlscoutsccs.org
donations.bgcec.org
donate.nationalcherryblossomfestival.org
give2.gozoe.org
give.hands.org
donate.walkwithsally.org
donate.foodbanksbc.org
fundraise.thelastwell.org
donate.samahope.org
give.cawst.org
donate.safewaternetwork.org
give.miraclefoundation.org
giving.operationgratitude.com
support.fourthdayministries.org
fundraise.avaaz.org
support.childrenscancerrecovery.org
support.everymothercounts.org
donate.curechm.org
fundraise.dreamerlogix.com
donate.thebreastcancercharities.org
support.bcef.org
support.cfthinc.org
fundraising.cedarlake.org
my.supportlpch.org
fundraise.leaderspark.org
donate.movemeantfoundation.com
give.jhskiclub.org
fundraise.everyday-warrior.org
fundraise.kidneyfund.org
my.orbis.org
act.morethanme.org
donate.yourlocalunitedway.org
give.peerhealthexchange.org
fundraise.tofightcancer.com
membership.nileproject.org
fundraise.salsthon.com
support.yosemitescouting.org
donate.recycledman.com
campaign.onearmenia.org
donate.mission14.org
fundraise.greenberetfoundation.org
give.savelivestogether.org
give.no-hunger.org
support.codysfreshstart.org
fundraise.kulturecity.org
contribute.sturge-weber.org
support.playrugbyusa.com
act.stophungernow.org
giving.mountaincircle.org
donate.playworks.org
donate.missioncontinues.org
my.loverescues.org
teamforce.facingourrisk.org
give.solutionsforchange.org
fundraise.richmondcf.org
donate.thecollegeinitiative.org
donate.truenorthservices.org
donate.cmhastarttalking.ca
donate.saveawarrior.org
support.cancerrecovery.ca
fundraise.modestofamilypromise.com
donate.peersproject.org
champions.foodforthepoor.org
donate.trisomy18.org
donate.fourgirlsforfamilies.org
donate.walkforhope.com
donate.healthebay.org
donate.restorenyc.org
support.blueengine.org
fund.soles4souls.org
fundraise.stvincentmow.org
support.homeboyindustries.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask3.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3oSALggiKnbroMYpU8K
0z+njH23sd1IPOur1fKCyUVZXS7QPvMoCbwX9Rq6UF/VZLk1JcwekIhyBRN42gft
gq93ZiTvtEmpiACSH4QPg21n73NXIZ04EeB2prz4BA8flpUCTAEV3zzd7e+yI2O1
0yXa2eGsCIRsj2Cz0TnQnA0GTloWcVANDKIjyH1/TQt8hZH+8paiec4L5J8ixjmX
5tEE5t9Vq1U/mrLwU1w8Q/MPl4p6r03rWoOztRYDr+j2nqu15UkGbc3yRzq45Ahc
zvTwXMw9XQ+ejKFfGt9POJPF6xE/PNtyPBWMBWntW+xKpGPz4xqF9yKIIurjpE/g
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9570062271879806178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-06 21:16:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 22:58:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask3.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24171711368525481826131640131438964734789108973615721931989751067554653387244623244770167467805853443897812894294829413406752140049535380243038638473884993528470777235448488586591042446252596805425265586783057470516714697682619569559404176598896963485008793014273389420573603036536896656010903882681956266029370572056338494448333794840377168919151387315960522047220463491265873122174311249054116688970319816223273273530543763480071189746023445933226565445388033138385076141914229943092467529417013498390009762080890463858099282873727992683052384255811237042504917664584398954527658446868499440787039766760684950380671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-87.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask3.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.adoptafamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstdescents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.namict.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.albertbakerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givehope.globalgenes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.highfivesfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.franciscanhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thirstproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.girlscoutsccs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donations.bgcec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.nationalcherryblossomfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give2.gozoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.hands.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkwithsally.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.foodbanksbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.thelastwell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.samahope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.cawst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.safewaternetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.miraclefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.operationgratitude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fourthdayministries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.avaaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.childrenscancerrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.everymothercounts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.curechm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.dreamerlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thebreastcancercharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bcef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cfthinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.cedarlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.supportlpch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.leaderspark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.movemeantfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.jhskiclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everyday-warrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kidneyfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orbis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.morethanme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.yourlocalunitedway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.peerhealthexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.tofightcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nileproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.salsthon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yosemitescouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.recycledman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.onearmenia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mission14.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.greenberetfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.savelivestogether.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.no-hunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.codysfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kulturecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contribute.sturge-weber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.playrugbyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.stophungernow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.mountaincircle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.playworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missioncontinues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.loverescues.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamforce.facingourrisk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.solutionsforchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.richmondcf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thecollegeinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.truenorthservices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cmhastarttalking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.saveawarrior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cancerrecovery.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.modestofamilypromise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.peersproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champions.foodforthepoor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trisomy18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fourgirlsforfamilies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.walkforhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.healthebay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.restorenyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.blueengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fund.soles4souls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.stvincentmow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.homeboyindustries.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cae36aa44d1faaa0fede1c9ebfad6f7df649260
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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