mask8.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a4:91:99:70:e4:b4:2e:f7 was issued on by GoDaddy.com, Inc..

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask8.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a4:91:99:70:e4:b4:2e:f7
Serial Number (int): 11858428003995627255
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: f9:c8:4c:9c:a9:38:52:fb:bf:a7:57:50:b3:5d:f3:45:5e:32:3e:df
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 5c:f6:65:eb:6e:5d:e4:12:8d:ba:b5:1d:49:47:be:8d:71:f3:9e:fb
Fingerprint (sha256): 92:f8:fa:f3:37:a9:17:f5:79:8d:be:43:90:ef:25:c1:de:8b:af:2f:28:96:46:55:6a:94:f3:08:b5:49:57:96

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-280.crl

Check the revocation status for certificate mask8.classy.org

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask8.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask8.classy.org
www.mask8.classy.org
donate.t4global.org
my.seattleaudubon.org
fundraise.foundrymentoring.org
sarahcannon.lls.org
fundraise.coralrestorationpanama.org
gift.osov.org
donate.leahspantrysf.org
donate.cok.net
donate.sarasgarden.org
support.baldgirlsdolunch.org
donate.mannapa.org
give.liveviolencefree.org
fundraising.sonsofnorway.com
donate.fosteringchangeforchildren.org
give.alatc.org
impact.first-care.org
events.brooklynvlp.com
donate.connectchi.org
give.robertmorris.edu
fundraise.fosternation.org
donate.ballonafriends.org
teams.olamisummit.com
giving.thelifeschool.co
donate.theunitygames.com
stream.actionagainsthunger.org
impact.kiwimbi.org
give.unravelcancer.org
fundraise.freedomschools.org
support.rmchildren.org
donate.vetoga.org
fundraise.aslanproject.org
donate.independencebigs.org
give.project432.org
support.kayyow.com
give.specialolympicsvermont.org
fundraise.salvationarmyhawaii.org
support.holychildhood.org
impact.epilepsynorcal.org
secure.phillypaws.org
classy.badgirlventures.com
impact.bgcportland.org
donate.helpkckids.org
fundraise.cmtysolutions.org
donate.pennyappealusa.org
donate.makeavetsweat.org
givelove.prosperityhomes.org
donate.hfny.org
give.marfan.org
donate.alsawi.org
donate.humanityrising.org
support.ewb-usa.org
support.oneworldchildrensfund.org
donate.hugginshospital.org
community.timtebowfoundation.org
fundraise.constrong.org
fundraise.onemorewave.net
donate.israelcc.org
donate.seedalliance.org
donate.childrenshealthfund.org
support.feedingseniors.org
donate.amtcworld.org
donate.myunitedway.ca
fundraise.jobsforlife.org
donate.blindkids.org
donate.ifopa.org
give.specialolympicsdc.org
donate.cahm.org
donate.iamthatgirl.com
mysupport.myelitis.org
give.imme.org
crowdfunding.cbn.org
go.humancoalition.org
give.theceshopfoundation.org
my.dreamcenter.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask8.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbbSUIX4f3rKy1Rmgzam
H3j23lVmWOVCtQCVxyuu6HX3GzBu3DXGpsM+8/W+AELoLN+CXDqAwmsMzV60iIzy
zpwFJqM1R+6YhiGnsyBQhwJtCKk4TvA5zNNXXjzMejMMixVVeyr4toRyaogXTOJN
vf24Ilnvp4pY9P/lDlrJ7ZPvcAtCWpUsUAnwbwVgfnjuKHMzVGyDXZFkqoZqvmHT
hrqEphYtm7Y2aQf3qXo2OtDueklgBLFaTwSY3S99YU6N9irqBrEWZ/SXzY3eMVn0
uQvZnASIzgsfLNJBvG9Dr/CvGHxzB5jhqo0fcj1eCx0wXPpF4mihme6wcDGE89d4
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11858428003995627255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-04 20:27:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 17:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask8.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25969005180037744809717547357448641603462894181533323620247793906582564479206599091723577070815305121353367491241969668153567609662186919560705657592960222750512730022593356510859416055613401154043523701130942984652372058661987352329968748228570977590679415296357655172517045141057451523004975111985493742788642391158859598127496719471284652469453247109953787011280082376604383029352094354037961789500221647194031716301588185662901077804157147803123719934407265842936154419586941354608138961185424374916375655335702717042216728435522957833603855112104469981447128812186596926355422988320820212101422136197766910015721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-280.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask8.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask8.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.t4global.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.seattleaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.foundrymentoring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahcannon.lls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.coralrestorationpanama.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.osov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.leahspantrysf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sarasgarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.baldgirlsdolunch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mannapa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.liveviolencefree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.sonsofnorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fosteringchangeforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.alatc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.first-care.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.brooklynvlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.connectchi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.robertmorris.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fosternation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ballonafriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teams.olamisummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.thelifeschool.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.theunitygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.actionagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.kiwimbi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.unravelcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.freedomschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rmchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.vetoga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.aslanproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.independencebigs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.project432.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kayyow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.specialolympicsvermont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.salvationarmyhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.holychildhood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.epilepsynorcal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.phillypaws.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classy.badgirlventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.bgcportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.helpkckids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.cmtysolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pennyappealusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.makeavetsweat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelove.prosperityhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.hfny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.marfan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.alsawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanityrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ewb-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.oneworldchildrensfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.hugginshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.timtebowfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.constrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.onemorewave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.israelcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.seedalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.childrenshealthfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.feedingseniors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amtcworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.myunitedway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.jobsforlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.blindkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ifopa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.specialolympicsdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cahm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iamthatgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupport.myelitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.imme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.cbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.humancoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.theceshopfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dreamcenter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9c84c9ca93852fbbfa75750b35df3455e323edf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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