mask6.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 25:2a:b8:c2:d6:68:31:5c was issued on by GoDaddy.com, Inc..

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask6.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:2a:b8:c2:d6:68:31:5c
Serial Number (int): 2678156075385499996
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 32:ca:74:15:12:cf:34:7e:86:bb:fa:3c:27:fb:50:f9:64:22:0a:7e
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): eb:ac:da:11:0a:77:f7:68:6b:2a:98:0d:78:0c:2a:17:26:46:78:c1
Fingerprint (sha256): 45:a0:b2:20:5d:10:63:9e:03:b4:c2:5a:fc:0f:9c:2d:7d:84:69:27:ac:58:ee:cf:49:be:73:19:d4:09:db:f1

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-181.crl

Check the revocation status for certificate mask6.classy.org

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask6.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask6.classy.org
www.mask6.classy.org
forms.gbs-cidp.org
donate.keeptahoeblue.org
donations.malesurvivor.org
donate.zoomiami.org
donate.stack-up.org
giving.kqed.org
donate.gridalternatives.org
donate.trees.org
donate.miriamskitchen.org
donate.azcancerfoundation.org
donate.centerforchildsafedivorce.org
giving.scgajunior.org
giving.ethanjostadfoundation.org
donate.castingforrecovery.org
fundraise.kingridgefoundation.org
donate.fairtradeusa.org
fundraise.rallyfoundation.org
donate.grameenamerica.org
donate.ethanlindberg.com
donate.futureleadersinaction.org
why.pidf.org
fundraise.forgottenchildren.org
me.all.org
donate.marchmullet.org
donate.sparkprogram.org
fundraise.leukemiacup.org
donate.livebeyond.org
empower.theexodusroad.com
donate.emdrhap.org
donate.raidersfoundation.org
donate.qohfoundation.org
give.globalheritagefund.org
projectlight.cbn.org
donate.natafoundation.org
impact.iamfoundation.org
support.dav.org
fundraise.fistulafoundation.org
donate.kcpetproject.org
donate.bravetheshave.coop
support.mtstcil.org
donate.2020microclinic.org
give.tinyhands.org
donate.heartsupport.com
donate.tech4autismnow.org
empower.children.org
give.adoptaclassroom.org
give.crossroadsschoolma.org
give.stupidcancer.org
donate.youthmentoring.org
events.athenspregnancycenter.org
support.pactforanimals.org
give.ellabakercenter.org
donate.sdyouth.org
giving.hchmd.org
my.animalcenter.org
donate.ussoccerfoundation.org
donate.justtryanit.com
pledge.giftofsound.org
fundraise.cascade.org
donate.villageenterprise.org
payment.youthranch.org
donate.unitedfreshstart.org
donate.ironheartfoundation.org
support.conserveschool.org
donate.lovethehungry.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask6.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK3k30C/9jHQ/kOM5G8L
Lkws4MG5k75cP+V+yEGGUWduNSEMSDJ5fKLDq57Vt6SqQovr7Ud5tKGvMFuaev7C
1D62kcwLdPLD9MCQcDPONLO8bTvqJDvEsXePL6kW/ws8iEt58cjacvqqXihvG523
cOFghpica4QBMggXKy3OWl215DtjOFRO4XFIb8xZb4p6vdrpguTWxY+2zelCo2Et
1FFNIYUK1ZzqvnPB9V+ul+MuFwz5EC16QysJvwXwZ6BzM8bJkbTiIDMzZS4v1u/m
uI2ECBJffmlpk3vI3Xr4/lqwD+30BsRk2tXExI6zmkmK9YyeaJ2XgVO3kz4Q5mZe
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2678156075385499996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-19 16:58:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 22:20:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask6.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333411336137620471114717604708079768657331283952380504474563327860460242121604299710484556634586586693302558682377373175542477762805610662647347078501153620005835828057609493254249715159631885653531697232902234917689443979749106331195019571896882145084993273189594445198926904910404365219200043493038213033323376285239347357445382919411479057913135025825851133747148082628931361440130690865440285962191308182943104356941497166031599589358614581285755254971406307208613085240684853775145738444369571205992759264417146810950862128013450246650534074089784800832222628659651312870881115359274240994010479733127896260307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-181.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1719 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask6.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask6.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gbs-cidp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.keeptahoeblue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donations.malesurvivor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.zoomiami.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.stack-up.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.gridalternatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.trees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.miriamskitchen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.azcancerfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.centerforchildsafedivorce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.scgajunior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.ethanjostadfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.castingforrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.kingridgefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fairtradeusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.rallyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.grameenamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ethanlindberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.futureleadersinaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'why.pidf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.forgottenchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.all.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.marchmullet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sparkprogram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.leukemiacup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.livebeyond.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empower.theexodusroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.emdrhap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.raidersfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.qohfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.globalheritagefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectlight.cbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.natafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.iamfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dav.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fistulafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kcpetproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bravetheshave.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mtstcil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.2020microclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.tinyhands.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.heartsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.tech4autismnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empower.children.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.adoptaclassroom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.crossroadsschoolma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.stupidcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.youthmentoring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.athenspregnancycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pactforanimals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ellabakercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sdyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.hchmd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.animalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ussoccerfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.justtryanit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pledge.giftofsound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.cascade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.villageenterprise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.youthranch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.unitedfreshstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ironheartfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.conserveschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lovethehungry.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32ca741512cf347e86bbfa3c27fb50f964220a7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084cbee774e84b7d925a70deccb711ae7ca6c700b2259c8154c7eaf8074de8a843743d6c04da2173ffa475d71aba66184b032b577bb286e1645787af8318cb4ac7df996adf8cf367ad0958d9fbf301674bc32377b82795af6c0aa0e31b8396c70a4d969b2c1248e0fa2bc6e74992c7ae4abc9f1035c64fd6633b41cd02b81d5f03ca8384000334ffed32e75494cec9a8b587e8328ee78a922f1062a47fb0a9b56c6a7d73b396ecdf4f52431e4853f68c43e1e4c58c5b22d8fdddaee14c2fa96bc0a3e3fbc40a5bfbf75fe813b28630a53098f9392651092e81fa5ccca25dfbd5e3d337440ecdfddc5f6dc67fb0050c4446665c4eb8b0511441fc0fe639cf97a9b