mask19.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 03:a0:00:b5:09:46:9a:bf was issued on by GoDaddy.com, Inc..

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask19.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:00:b5:09:46:9a:bf
Serial Number (int): 261209555932191423
Serial Number lenght: 58 bits, 8 octets

SubjectKeyId: 51:48:50:c3:41:e0:55:50:96:59:01:87:5c:9e:42:fe:41:80:b2:fc
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 9b:73:1f:ea:e5:5d:8a:02:42:1c:7e:ae:60:fd:8b:fa:0e:d5:8e:6e
Fingerprint (sha256): 60:b7:6f:ec:6a:4b:29:78:92:44:14:da:47:03:4c:f8:ab:87:f9:27:18:8a:58:49:39:5b:5e:b2:44:42:d0:e2

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-903.crl

Check the revocation status for certificate mask19.classy.org

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask19.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask19.classy.org
www.mask19.classy.org
donate.hearingdog.org
donate.jamesbeard.org
support.recyclingpartnership.org
give.payawaythelayaway.org
support.aimatmelanoma.org
donate.earn.org
give.supportbarrow.org
donate.bbbsmentors.ca
fundraise.fulfillnj.org
support.angelstreetmemphis.com
donate.breastcanceralliance.org
donate.teamcsa.org
donate.kwacares.org
donate.rfkchildren.org
support.childrensheartlink.org
support.litememphis.com
support.nvblindchildren.org
donate.understood.org
give.caringkindnyc.org
impact.envisionco.org
give.communitycapitaladvisors.org
connect.epilepsymichigan.org
give.ieeefoundation.org
give.aerhq.org
donate.clarkeschools.org
donate.robbies-hope.com
my.hopetorise.org
donate.leonardodicaprio.org
donate.marinrowing.org
give.eastersealsci.com
give.weareosd.org
support.richmondspca.org
donate.nomore.org
giveavoice.stopfoodborneillness.org
donate.vailhealthfoundation.org
give.classicalacademy.com
give-cas.salvationarmy.org
give.ocrahope.org
donate.carpeventus.com
donate.k9partnersforpatriots.com
support.icrichild.org
support.partnershipsforchildren.org
donate.cwesoar.com
support.fitnh.org
giving.woodstockacademy.org
support.africaasap.org
give.care.org
donate.openhandsoverflowinghearts.org
donate.projectkesher.org
give.fightingblindness.org
give.agewellseniorservices.org
givenow.waparks.org
donate.motherstrustfoundation.org
give.oake.org
donate.iel.org
give.rfcx.org
donate.brooklynhistory.org
donate.girlventures.org
support.palestinefoundation.org
www.donatehfc.com
give.artworxla.org
giving.smiletrain.org
support.upwardboundhouse.org
fundraise.medals4mettle.org
give.lifelinechild.org
support.kitchensforgood.org
investnow.ghcorps.org
donate.usanordic.org
fundraise.alliesagainstslavery.org
give.helunahealth.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org
mask19.classy.org

Certificate

The complete raw certificate details for mask19.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+LwD6I5vUoaGkhNi3fy
szgKW2YZgoYs/8OXQ5fGeSQz2Ox+EQtOEvWJYsi4cLwMBBTj29M+LN7IA2YLOp/T
dmLmCU+xxzPSe3JqWbAJFQdnCNO7/M7VGQuFvCfOd2rR9abGXDJqIk0A7kexqwzd
qiLzKANSRbqdAyL6JXTzzji5WEd8DkI7Gc+tdJhj0easti5qv0t7n3tCotEJ/FN+
i7fi3DpzjTfxpPQS4Xybi/bjmJ1PJmHT83DziF3pI2Q/OH2x5ShaeXGICfgLI4/g
EUOM7gOpSLlPda/BZRoWp06qSLsMcImjqnE/i74WTy2zwcXwY5oX/NUZv9truJBa
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261209555932191423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 17:12:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 17:34:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask19.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19678844439456032118214565057401656318368883241411329148011356793196369380217523749273789782804775658558131147121738202701955494613380753683659716732949870899086024717347700792619817346240655491692977598959413504565710161205692914572338228249896841724390791491520028632649784012748565985972143903499398103742775876068634775796420347216373114886864324463727430391990843482329266313035163764599126010078230518476714673909046421872852454017123667335686679403099941517215058051176784080950916416150655487949317737633398877331852917797365140249352557296791915196286259717684362047109786084424757078179598407491125173574211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-903.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1833 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask19.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask19.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.hearingdog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.jamesbeard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.recyclingpartnership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.payawaythelayaway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.aimatmelanoma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.earn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.supportbarrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.bbbsmentors.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fulfillnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.angelstreetmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.breastcanceralliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.teamcsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kwacares.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.rfkchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.childrensheartlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.litememphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nvblindchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.understood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.caringkindnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.envisionco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.communitycapitaladvisors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.epilepsymichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ieeefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aerhq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.clarkeschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.robbies-hope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hopetorise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.leonardodicaprio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.marinrowing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.eastersealsci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.weareosd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.richmondspca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.nomore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveavoice.stopfoodborneillness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.vailhealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.classicalacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give-cas.salvationarmy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ocrahope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.carpeventus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.k9partnersforpatriots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.icrichild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.partnershipsforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cwesoar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fitnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.woodstockacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.africaasap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.care.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.openhandsoverflowinghearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.projectkesher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.fightingblindness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.agewellseniorservices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givenow.waparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.motherstrustfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.oake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.rfcx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.brooklynhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.girlventures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.palestinefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donatehfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.artworxla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.smiletrain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.upwardboundhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.medals4mettle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.lifelinechild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kitchensforgood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investnow.ghcorps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.usanordic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.alliesagainstslavery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.helunahealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							514850c341e05550965901875c9e42fe4180b2fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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