mask12.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ef:19:e5:98:55:c1:82:02 was issued on by GoDaddy.com, Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask12.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:19:e5:98:55:c1:82:02
Serial Number (int): 17229054291919077890
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 87:19:2f:eb:fd:00:b4:cb:0b:87:52:3f:8c:a5:db:4e:d9:16:95:cf
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 9c:12:98:71:6a:3c:30:47:6d:62:c9:d6:f2:bd:bf:55:c9:8c:b8:1a
Fingerprint (sha256): 6d:2d:43:e2:d3:5d:aa:b2:5a:71:43:d7:32:13:2d:f7:a1:93:27:b2:f8:44:64:8c:8b:22:e6:22:84:0c:fa:bd

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-753.crl

Check the revocation status for certificate mask12.classy.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask12.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask12.classy.org
www.mask12.classy.org
donate.strongmissions.com
donate.missionhope.org
donate.idtheftcenter.org
donate.booksforkids.org
donate.mynextbigadventure.org
donate.evidenceaction.org
my.shhkids.org
give.aviary.org
donate.seedinglabs.org
flashes.givetokent.org
donate.thelovepitrescue.org
donate.iava.org
handup.urbanstreetangels.org
gifts.abilitiesfirst.org
impact.americancurefund.org
give.childreneverywhere.org
fundraise.nufoundation.org
give.dcds.edu
fundraise.100blackmen-atlanta.org
register.connectedinmotion.ca
fundraise.showhope.org
donate.fscdr.org
mo.noshavenovember.co
give.gseagles.com
invest.nuleadership.org
fundraise.twistedpink.org
give.bcrf.org
give.merrickcs.org
give.selamtafamilyproject.org
fundraise.operationeyesight.com
crowdfunding.maryville.edu
give.ijm.org
give.foodrescue.us
support.drinklocalthinkglobal.org
my.movemeantfoundation.org
donate.sunshinecottage.org
donate.georgetownministrycenter.org
donate.lwr.org
my.sbfsa.org
impact.grassrootsoccer.org
support.pasopacifico.org
donate.sistersoftheroad.org
fundraise.voa.org
donate.collegetrack.org
fundraise.everywomancan.org
donate.amoshealth.org
donate.salvationarmysouth.com
impact.sowa.org
give.womenscenterofjax.org
donatenow.discoverycube.org
fundraise.wearezoe.org
donate.legacyyte.org
donate.patientsafetymovement.org
donate.ourthreewinners.org
my.superheroheartrun.com
donate.kidznotes.org
fundraise.thegoodtimesproject.org
register.larimerhumane.org
fundraise.beboldbebald.org
fundraise.fonkoze.org
donate.friendsofoutdoorschool.org
donate.beyondborders.net
fundraise.foodbankonline.org
donate.davidlynchfoundation.org
give.826boston.org
donate.dollarfor.org
donate.fairtradecertified.org
give.bethedifferencefoundation.org
donate.pavymca.org
donate.daysforgirls.org
give.mlf.org
give.thecorporatesource.org
donate.stoptheclot.org
givenow.silverbay.org
give.urbanventures.org
donate.litworld.org
give.kidango.org
donate.code.org
give.suncoastyfc.org
give.publicintegrity.org
fundraise.raphahouse.org
impact.aimhigh.org
give.reformationproject.org
donate.animalplace.org
support.youthsolutions.org
fundraise.wateringminds.org
support.honored.org
give.sevymca.org
www.idsafoundation.org
donate.oldspokeshome.com
donate.adrn.org
donate.capitalizeforkids.org
donate.aitaf.org
give.worldbicyclerelief.org
donate.pbscommunityfoundation.org
donate.propublica.org
donate.wildaid.org
donate.iefusa.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask12.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o+LnSgx5NBjlfOO2/0C
lfxRcWWz+m/ABp3z7fL3n/KAV/8B33J4PXEn6vt+TleeGZyDx76h8U0x94zjZLhx
+5FYN3cVIEXu9EYVZIHilxh0Rum3YI2L8QSpvY0LsYRIP7hNHxu0Gk0dQoKifROa
rMOYgj516huH1xdadMBruKPMxzw2Jjj9IWSiFABpfwIiaomWG/Q5RXeVA7PBhbK+
F1kYi0pWIJR+nykbEY5DPE696BhC066BO7cUTqDVx3No5pQXnqLMO9xFFaUt7zuM
1ITzCiZ0SSspVbZ2ekq6liciaOV17FxAPawAvndms3uRT4IYV0MTaeZdrxkT5ZYd
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17229054291919077890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 16:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 18:07:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask12.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27085782121281442485287670810229836670894928807845895643501787975181771420178517771687555490662854219079628610400315387370072640432201391309750154076576661340456310615791530661373339799827602961852499386968844000127647202753408723546430167409346544675288833112859986338198549924163013349731316913042857129578514356384509973539612239405854088221553394395789219426426168935931720592574353310696574118279311402589150149210766785301626184899043392333852495631073195911106097319743671752516629511778713347434926791439800112942786839304777155167457067500334320884927036274584778939894081394467737564533939139164632855747991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-753.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask12.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.strongmissions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.missionhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.idtheftcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.booksforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mynextbigadventure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.evidenceaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shhkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.aviary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.seedinglabs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashes.givetokent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.thelovepitrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iava.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handup.urbanstreetangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.abilitiesfirst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.americancurefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.childreneverywhere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.nufoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dcds.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.100blackmen-atlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.connectedinmotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.showhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fscdr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.noshavenovember.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.gseagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.nuleadership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.twistedpink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bcrf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.merrickcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.selamtafamilyproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.operationeyesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ijm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.foodrescue.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.drinklocalthinkglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.movemeantfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sunshinecottage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.georgetownministrycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.lwr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sbfsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.grassrootsoccer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pasopacifico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sistersoftheroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.voa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.collegetrack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.everywomancan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amoshealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.salvationarmysouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.sowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.womenscenterofjax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatenow.discoverycube.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wearezoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.legacyyte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.patientsafetymovement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ourthreewinners.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.superheroheartrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.kidznotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.thegoodtimesproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.larimerhumane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.beboldbebald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fonkoze.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.friendsofoutdoorschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.beyondborders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.foodbankonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.davidlynchfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.826boston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.dollarfor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fairtradecertified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.bethedifferencefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pavymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.daysforgirls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.mlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.thecorporatesource.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.stoptheclot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givenow.silverbay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.urbanventures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.litworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.kidango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.code.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.suncoastyfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.publicintegrity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.raphahouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.aimhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.reformationproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.animalplace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.youthsolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.wateringminds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.honored.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.sevymca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idsafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.oldspokeshome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.adrn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.capitalizeforkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.aitaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.worldbicyclerelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pbscommunityfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.propublica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.wildaid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iefusa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87192febfd00b4cb0b87523f8ca5db4ed91695cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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