mask8.classy.org

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 63:c6:88:bb:68:5a:61:23 was issued on by GoDaddy.com, Inc..

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mask8.classy.org,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:c6:88:bb:68:5a:61:23
Serial Number (int): 7189584193634591011
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f9:c8:4c:9c:a9:38:52:fb:bf:a7:57:50:b3:5d:f3:45:5e:32:3e:df
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 8f:da:1e:8e:c5:a8:b4:31:ff:f6:54:e7:05:2f:85:27:dc:8f:62:91
Fingerprint (sha256): e3:ab:f1:6a:e9:2b:e1:e9:72:e0:0d:30:99:af:26:0e:86:64:5e:6c:da:63:89:72:e0:4c:95:49:78:9c:b5:ef

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-278.crl

Check the revocation status for certificate mask8.classy.org

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mask8.classy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mask8.classy.org
www.mask8.classy.org
donate.t4global.org
my.seattleaudubon.org
fundraise.foundrymentoring.org
sarahcannon.lls.org
fundraise.coralrestorationpanama.org
gift.osov.org
donate.leahspantrysf.org
donate.cok.net
donate.sarasgarden.org
support.baldgirlsdolunch.org
donate.mannapa.org
give.liveviolencefree.org
fundraising.sonsofnorway.com
donate.fosteringchangeforchildren.org
give.alatc.org
impact.first-care.org
events.brooklynvlp.com
donate.connectchi.org
give.robertmorris.edu
fundraise.fosternation.org
donate.ballonafriends.org
teams.olamisummit.com
giving.thelifeschool.co
donate.theunitygames.com
stream.actionagainsthunger.org
impact.kiwimbi.org
give.unravelcancer.org
fundraise.freedomschools.org
support.rmchildren.org
donate.vetoga.org
fundraise.aslanproject.org
donate.independencebigs.org
give.project432.org
support.kayyow.com
give.specialolympicsvermont.org
fundraise.salvationarmyhawaii.org
support.holychildhood.org
impact.epilepsynorcal.org
secure.phillypaws.org
classy.badgirlventures.com
impact.bgcportland.org
donate.helpkckids.org
fundraise.cmtysolutions.org
donate.pennyappealusa.org
givelove.prosperityhomes.org
donate.hfny.org
give.marfan.org
donate.alsawi.org
donate.humanityrising.org
support.ewb-usa.org
support.oneworldchildrensfund.org
donate.hugginshospital.org
community.timtebowfoundation.org
fundraise.constrong.org
fundraise.onemorewave.net
donate.seedalliance.org
donate.childrenshealthfund.org
support.feedingseniors.org
donate.amtcworld.org
donate.myunitedway.ca
donate.blindkids.org
donate.ifopa.org
donate.cahm.org
donate.iamthatgirl.com
mysupport.myelitis.org
give.imme.org
crowdfunding.cbn.org
go.humancoalition.org
donate.makeavetsweat.org
donate.israelcc.org
fundraise.jobsforlife.org

Other certificates including the domain name classy.org

(limited to 100 certificates)
mask9.classy.org
mask8.classy.org
mask14.classy.org
mask3.classy.org
mask16.classy.org
itsstatus.unc.edu
mask11.classy.org
mask6.classy.org
mask16.classy.org
sni29215.cloudflaressl.com
itsstatus.unc.edu
www.classy.org
mask10.classy.org
mask4.classy.org
mask19.classy.org
mask4.classy.org
mask9.classy.org
classy.org
mask20.classy.org
mask3.classy.org
mask14.classy.org
mask16.classy.org
mask10.classy.org
itsstatus.unc.edu
mask17.classy.org
mask4.classy.org
mask19.classy.org
mask5.classy.org
mask16.classy.org
mask5.classy.org
itsstatus.unc.edu
mask13.classy.org
mask18.classy.org
mask5.classy.org
ssl880523.cloudflaressl.com
mask16.classy.org
testprod.classy.org
mask11.classy.org
classy.org
itsstatus.unc.edu
mask3.classy.org
itsstatus.unc.edu
itsstatus.unc.edu
mask16.classy.org
mask9.classy.org
*.classy.org
mask11.classy.org
give.classy.org
masking.classy.org
mask16.classy.org
mask9.classy.org
mask3.classy.org
mask16.classy.org
mask7.classy.org
preprod.classy.org
mask10.classy.org
mask17.classy.org
mask18.classy.org
mask13.classy.org
mask3.classy.org
mask7.classy.org
mask7.classy.org
learn.classy.org
mask4.classy.org
mask9.classy.org
mask3.classy.org
cloudvps-status.com
mask19.classy.org
www.classy.org
mask18.classy.org
mask19.classy.org
mask17.classy.org
mask6.classy.org
mask8.classy.org
mask17.classy.org
classy.org
mask18.classy.org
mask17.classy.org
mask6.classy.org
mask19.classy.org
mask6.classy.org
mask3.classy.org
mask8.classy.org
testprod.classy.org
devblog.classy.org
mask10.classy.org
mask14.classy.org
mask12.classy.org
mask11.classy.org
mask4.classy.org
content.classy.org
mask14.classy.org
mask16.classy.org
mask17.classy.org
mask14.classy.org
mask9.classy.org
mask16.classy.org
mask16.classy.org
pay.classy.org
mask16.classy.org

Certificate

The complete raw certificate details for mask8.classy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMLTCCCxWgAwIBAgIIY8aIu2haYSMwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMTYwODAyMjExOTM4WhcN
MTkwNTE2MTcyNjM4WjA+MSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0
ZWQxGTAXBgNVBAMTEG1hc2s4LmNsYXNzeS5vcmcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNttJQhfh/esrLVGaDNqYfePbeVWZY5UK1AJXHK67odfcb
MG7cNcamwz7z9b4AQugs34JcOoDCawzNXrSIjPLOnAUmozVH7piGIaezIFCHAm0I
qThO8DnM01dePMx6MwyLFVV7Kvi2hHJqiBdM4k29/bgiWe+nilj0/+UOWsntk+9w
C0JalSxQCfBvBWB+eO4oczNUbINdkWSqhmq+YdOGuoSmFi2btjZpB/epejY60O56
SWAEsVpPBJjdL31hTo32KuoGsRZn9JfNjd4xWfS5C9mcBIjOCx8s0kG8b0Ov8K8Y
fHMHmOGqjR9yPV4LHTBc+kXiaKGZ7rBwMYTz13jpAgMBAAGjggi2MIIIsjAMBgNV
HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8B
Af8EBAMCBaAwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5nb2RhZGR5LmNv
bS9nZGlnMnMxLTI3OC5jcmwwXQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcG
CCsGAQUFBwIBFitodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9z
aXRvcnkvMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmdvZGFkZHkuY29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRp
ZmljYXRlcy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSME
GDAWgBRAwr0njsw0gzCiM9f7bLPwtCyAzjCCByEGA1UdEQSCBxgwggcUghBtYXNr
OC5jbGFzc3kub3JnghR3d3cubWFzazguY2xhc3N5Lm9yZ4ITZG9uYXRlLnQ0Z2xv
YmFsLm9yZ4IVbXkuc2VhdHRsZWF1ZHVib24ub3Jngh5mdW5kcmFpc2UuZm91bmRy
eW1lbnRvcmluZy5vcmeCE3NhcmFoY2Fubm9uLmxscy5vcmeCJGZ1bmRyYWlzZS5j
b3JhbHJlc3RvcmF0aW9ucGFuYW1hLm9yZ4INZ2lmdC5vc292Lm9yZ4IYZG9uYXRl
LmxlYWhzcGFudHJ5c2Yub3Jngg5kb25hdGUuY29rLm5ldIIWZG9uYXRlLnNhcmFz
Z2FyZGVuLm9yZ4Icc3VwcG9ydC5iYWxkZ2lybHNkb2x1bmNoLm9yZ4ISZG9uYXRl
Lm1hbm5hcGEub3JnghlnaXZlLmxpdmV2aW9sZW5jZWZyZWUub3JnghxmdW5kcmFp
c2luZy5zb25zb2Zub3J3YXkuY29tgiVkb25hdGUuZm9zdGVyaW5nY2hhbmdlZm9y
Y2hpbGRyZW4ub3Jngg5naXZlLmFsYXRjLm9yZ4IVaW1wYWN0LmZpcnN0LWNhcmUu
b3JnghZldmVudHMuYnJvb2tseW52bHAuY29tghVkb25hdGUuY29ubmVjdGNoaS5v
cmeCFWdpdmUucm9iZXJ0bW9ycmlzLmVkdYIaZnVuZHJhaXNlLmZvc3Rlcm5hdGlv
bi5vcmeCGWRvbmF0ZS5iYWxsb25hZnJpZW5kcy5vcmeCFXRlYW1zLm9sYW1pc3Vt
bWl0LmNvbYIXZ2l2aW5nLnRoZWxpZmVzY2hvb2wuY2+CGGRvbmF0ZS50aGV1bml0
eWdhbWVzLmNvbYIec3RyZWFtLmFjdGlvbmFnYWluc3RodW5nZXIub3JnghJpbXBh
Y3Qua2l3aW1iaS5vcmeCFmdpdmUudW5yYXZlbGNhbmNlci5vcmeCHGZ1bmRyYWlz
ZS5mcmVlZG9tc2Nob29scy5vcmeCFnN1cHBvcnQucm1jaGlsZHJlbi5vcmeCEWRv
bmF0ZS52ZXRvZ2Eub3JnghpmdW5kcmFpc2UuYXNsYW5wcm9qZWN0Lm9yZ4IbZG9u
YXRlLmluZGVwZW5kZW5jZWJpZ3Mub3JnghNnaXZlLnByb2plY3Q0MzIub3JnghJz
dXBwb3J0LmtheXlvdy5jb22CH2dpdmUuc3BlY2lhbG9seW1waWNzdmVybW9udC5v
cmeCIWZ1bmRyYWlzZS5zYWx2YXRpb25hcm15aGF3YWlpLm9yZ4IZc3VwcG9ydC5o
b2x5Y2hpbGRob29kLm9yZ4IZaW1wYWN0LmVwaWxlcHN5bm9yY2FsLm9yZ4IVc2Vj
dXJlLnBoaWxseXBhd3Mub3JnghpjbGFzc3kuYmFkZ2lybHZlbnR1cmVzLmNvbYIW
aW1wYWN0LmJnY3BvcnRsYW5kLm9yZ4IVZG9uYXRlLmhlbHBrY2tpZHMub3Jnghtm
dW5kcmFpc2UuY210eXNvbHV0aW9ucy5vcmeCGWRvbmF0ZS5wZW5ueWFwcGVhbHVz
YS5vcmeCHGdpdmVsb3ZlLnByb3NwZXJpdHlob21lcy5vcmeCD2RvbmF0ZS5oZm55
Lm9yZ4IPZ2l2ZS5tYXJmYW4ub3JnghFkb25hdGUuYWxzYXdpLm9yZ4IZZG9uYXRl
Lmh1bWFuaXR5cmlzaW5nLm9yZ4ITc3VwcG9ydC5ld2ItdXNhLm9yZ4Ihc3VwcG9y
dC5vbmV3b3JsZGNoaWxkcmVuc2Z1bmQub3Jnghpkb25hdGUuaHVnZ2luc2hvc3Bp
dGFsLm9yZ4IgY29tbXVuaXR5LnRpbXRlYm93Zm91bmRhdGlvbi5vcmeCF2Z1bmRy
YWlzZS5jb25zdHJvbmcub3JnghlmdW5kcmFpc2Uub25lbW9yZXdhdmUubmV0ghdk
b25hdGUuc2VlZGFsbGlhbmNlLm9yZ4IeZG9uYXRlLmNoaWxkcmVuc2hlYWx0aGZ1
bmQub3JnghpzdXBwb3J0LmZlZWRpbmdzZW5pb3JzLm9yZ4IUZG9uYXRlLmFtdGN3
b3JsZC5vcmeCFWRvbmF0ZS5teXVuaXRlZHdheS5jYYIUZG9uYXRlLmJsaW5ka2lk
cy5vcmeCEGRvbmF0ZS5pZm9wYS5vcmeCD2RvbmF0ZS5jYWhtLm9yZ4IWZG9uYXRl
LmlhbXRoYXRnaXJsLmNvbYIWbXlzdXBwb3J0Lm15ZWxpdGlzLm9yZ4INZ2l2ZS5p
bW1lLm9yZ4IUY3Jvd2RmdW5kaW5nLmNibi5vcmeCFWdvLmh1bWFuY29hbGl0aW9u
Lm9yZ4IYZG9uYXRlLm1ha2VhdmV0c3dlYXQub3JnghNkb25hdGUuaXNyYWVsY2Mu
b3JnghlmdW5kcmFpc2Uuam9ic2ZvcmxpZmUub3JnMB0GA1UdDgQWBBT5yEycqThS
+7+nV1CzXfNFXjI+3zANBgkqhkiG9w0BAQsFAAOCAQEAXo4cNsbwBpo9L87G6dWx
vw+hLtHRKI9tOsarXHHscYITgKFS/1vmK102ej8K1BiPwW17aMI9eLV/XmF1G+oU
4Cs15vMwRy9VFhUl8q+MeZMcFfj8s2B/FOGZgcsL4fWgVLH1faKepuLP9Q/l0lXH
itrEJbGs5WHn9MP6nb/SUrNynI3IQU1RLbfYFIr8jspvYuU08oP7FfYmy4vV7hKA
U6ImXf/ehefIOJM7pjZgf4gsBf4p1HT2kOS7qKN1jqTfuE3faLJ8NciWNWi7ix9u
g/NMDe9whmu0i73ZoDMuMhFyO/6IkVkOIL2xRf9imfbtzoaz6BTF6sxebtPQdoUK
nA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbbSUIX4f3rKy1Rmgzam
H3j23lVmWOVCtQCVxyuu6HX3GzBu3DXGpsM+8/W+AELoLN+CXDqAwmsMzV60iIzy
zpwFJqM1R+6YhiGnsyBQhwJtCKk4TvA5zNNXXjzMejMMixVVeyr4toRyaogXTOJN
vf24Ilnvp4pY9P/lDlrJ7ZPvcAtCWpUsUAnwbwVgfnjuKHMzVGyDXZFkqoZqvmHT
hrqEphYtm7Y2aQf3qXo2OtDueklgBLFaTwSY3S99YU6N9irqBrEWZ/SXzY3eMVn0
uQvZnASIzgsfLNJBvG9Dr/CvGHxzB5jhqo0fcj1eCx0wXPpF4mihme6wcDGE89d4
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7189584193634591011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-02 21:19:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 17:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mask8.classy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25969005180037744809717547357448641603462894181533323620247793906582564479206599091723577070815305121353367491241969668153567609662186919560705657592960222750512730022593356510859416055613401154043523701130942984652372058661987352329968748228570977590679415296357655172517045141057451523004975111985493742788642391158859598127496719471284652469453247109953787011280082376604383029352094354037961789500221647194031716301588185662901077804157147803123719934407265842936154419586941354608138961185424374916375655335702717042216728435522957833603855112104469981447128812186596926355422988320820212101422136197766910015721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-278.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1816 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mask8.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mask8.classy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.t4global.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.seattleaudubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.foundrymentoring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahcannon.lls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.coralrestorationpanama.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.osov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.leahspantrysf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.sarasgarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.baldgirlsdolunch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.mannapa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.liveviolencefree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.sonsofnorway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.fosteringchangeforchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.alatc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.first-care.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.brooklynvlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.connectchi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.robertmorris.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.fosternation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ballonafriends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teams.olamisummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.thelifeschool.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.theunitygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.actionagainsthunger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.kiwimbi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.unravelcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.freedomschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rmchildren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.vetoga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.aslanproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.independencebigs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.project432.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kayyow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.specialolympicsvermont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.salvationarmyhawaii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.holychildhood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.epilepsynorcal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.phillypaws.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classy.badgirlventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.bgcportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.helpkckids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.cmtysolutions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.pennyappealusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givelove.prosperityhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.hfny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.marfan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.alsawi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.humanityrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ewb-usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.oneworldchildrensfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.hugginshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.timtebowfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.constrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.onemorewave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.seedalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.childrenshealthfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.feedingseniors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.amtcworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.myunitedway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.blindkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.ifopa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.cahm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.iamthatgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupport.myelitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.imme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfunding.cbn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.humancoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.makeavetsweat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.israelcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraise.jobsforlife.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9c84c9ca93852fbbfa75750b35df3455e323edf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e8e1c36c6f0069a3d2fcec6e9d5b1bf0fa12ed1d1288f6d3ac6ab5c71ec71821380a152ff5be62b5d367a3f0ad4188fc16d7b68c23d78b57f5e61751bea14e02b35e6f330472f55161525f2af8c79931c15f8fcb3607f14e19981cb0be1f5a054b1f57da29ea6e2cff50fe5d255c78adac425b1ace561e7f4c3fa9dbfd252b3729c8dc8414d512db7d8148afc8eca6f62e534f283fb15f626cb8bd5ee128053a2265dffde85e7c838933ba636607f882c05fe29d474f690e4bba8a3758ea4dfb84ddf68b27c35c8963568bb8b1f6e83f34c0def70866bb48bbdd9a0332e3211723bfe8891590e20bdb145ff6299f6edce86b3e814c5eacc5e6ed3d076850a9c