christthekingjerseycity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:cf:84:8b:76:37:42:c1:b1:18:25:df:4c:0e:ea:4b:d1 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=christthekingjerseycity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:cf:84:8b:76:37:42:c1:b1:18:25:df:4c:0e:ea:4b:d1
Serial Number (int): 316057874909564658740542884029922823261137
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:26:f5:0a:20:a0:66:1d:ac:e3:92:e5:d4:d1:f5:4c:01:b5:d0:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:5b:cf:82:39:bc:69:f7:48:b4:c2:47:5b:25:e9:9e:87:27:d0:a9
Fingerprint (sha256): 00:65:1e:11:f0:67:3b:d2:31:a9:8b:78:19:28:26:e3:c3:b8:62:61:fb:44:ec:f0:50:3d:1f:5d:c4:2f:d0:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate christthekingjerseycity.org

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for christthekingjerseycity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbstorenola.com
christthekingjerseycity.org
drvcschools.org
holyangelsregional.org
holytrinityhs.org
ndsnet.org
parish.staugustinenj.org
preblecountycatholics.org
romancatholic.kingston.on.ca
saintjamesbr.org
spsbayshore.org
spssmith.org
srsny.org
sspjschool.net
stbernardschs.com
stchris-school.org
steas.com
stedwardconfessor.org
stfaustina.ca
stjamesschoolsa.org
stjohnthebaptistdhs.net
stlawrencebrindisiwaskom.org
stmary11030.org
stmaryhudson.cc
stroseschool.net
stthomasschool.net
umncatholic.com
www.cbstorenola.com
www.drvcschools.org
www.holyangelsregional.org
www.holytrinityhs.org
www.ndsnet.org
www.preblecountycatholics.org
www.saintjamesbr.org
www.spsbayshore.org
www.spssmith.org
www.srsny.org
www.sspjschool.net
www.stbernardschs.com
www.stchris-school.org
www.steas.com
www.stedwardconfessor.org
www.stfaustina.ca
www.stjamesschoolsa.org
www.stjohnthebaptistdhs.net
www.stlawrencebrindisiwaskom.org
www.stmary11030.org
www.stmaryhudson.cc
www.stroseschool.net
www.stthomasschool.net
www.umncatholic.com
www.youthencounter906.com
youthencounter906.com

Other certificates including the domain name christthekingjerseycity.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for christthekingjerseycity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJuDCCCKCgAwIBAgISA6DPhIt2N0LBsRgl30wO6kvRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjkwNTQzMDlaFw0x
OTA5MjcwNTQzMDlaMCYxJDAiBgNVBAMTG2NocmlzdHRoZWtpbmdqZXJzZXljaXR5
Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRWIhWTNZqwQTrA
90nacnXT3XU2ZlLL+V60K/PTxkIcTObcr3QkViwTIhnQr86+2vvBDsRkN26zcXIi
4oTWVQRNSGJngDts0Ah/LkkIZ/AsG5epDd9rBwGMRq8w9ITWRScQ1+33AovkyZCw
D3hKw3HcDDOHzma2UCz1lrNSxD0LLvFKRQ6xKxUo2WAqX2l9pFe5D1LRo23bznlO
0vVV/dAMr5Xu0OQJgynIAq6YcDNpkb3b9sIGVZE6FUUsC2aDgqZ3SP3XZ2HT4VtF
Qg9YLhKMVbJOnKdXc+Gf8FiRomYbEk+lq+h9Qvz+gnyp3utkveaHzxL5SBXRgakc
VXLNdfECAwEAAaOCBrowgga2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU2ib1CiCg
Zh2s45Ll1NH1TAG10AwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCBG4GA1UdEQSCBGUwggRhgg9jYnN0b3Jlbm9sYS5j
b22CG2NocmlzdHRoZWtpbmdqZXJzZXljaXR5Lm9yZ4IPZHJ2Y3NjaG9vbHMub3Jn
ghZob2x5YW5nZWxzcmVnaW9uYWwub3JnghFob2x5dHJpbml0eWhzLm9yZ4IKbmRz
bmV0Lm9yZ4IYcGFyaXNoLnN0YXVndXN0aW5lbmoub3JnghlwcmVibGVjb3VudHlj
YXRob2xpY3Mub3Jnghxyb21hbmNhdGhvbGljLmtpbmdzdG9uLm9uLmNhghBzYWlu
dGphbWVzYnIub3Jngg9zcHNiYXlzaG9yZS5vcmeCDHNwc3NtaXRoLm9yZ4IJc3Jz
bnkub3Jngg5zc3Bqc2Nob29sLm5ldIIRc3RiZXJuYXJkc2Nocy5jb22CEnN0Y2hy
aXMtc2Nob29sLm9yZ4IJc3RlYXMuY29tghVzdGVkd2FyZGNvbmZlc3Nvci5vcmeC
DXN0ZmF1c3RpbmEuY2GCE3N0amFtZXNzY2hvb2xzYS5vcmeCF3N0am9obnRoZWJh
cHRpc3RkaHMubmV0ghxzdGxhd3JlbmNlYnJpbmRpc2l3YXNrb20ub3Jngg9zdG1h
cnkxMTAzMC5vcmeCD3N0bWFyeWh1ZHNvbi5jY4IQc3Ryb3Nlc2Nob29sLm5ldIIS
c3R0aG9tYXNzY2hvb2wubmV0gg91bW5jYXRob2xpYy5jb22CE3d3dy5jYnN0b3Jl
bm9sYS5jb22CE3d3dy5kcnZjc2Nob29scy5vcmeCGnd3dy5ob2x5YW5nZWxzcmVn
aW9uYWwub3JnghV3d3cuaG9seXRyaW5pdHlocy5vcmeCDnd3dy5uZHNuZXQub3Jn
gh13d3cucHJlYmxlY291bnR5Y2F0aG9saWNzLm9yZ4IUd3d3LnNhaW50amFtZXNi
ci5vcmeCE3d3dy5zcHNiYXlzaG9yZS5vcmeCEHd3dy5zcHNzbWl0aC5vcmeCDXd3
dy5zcnNueS5vcmeCEnd3dy5zc3Bqc2Nob29sLm5ldIIVd3d3LnN0YmVybmFyZHNj
aHMuY29tghZ3d3cuc3RjaHJpcy1zY2hvb2wub3Jngg13d3cuc3RlYXMuY29tghl3
d3cuc3RlZHdhcmRjb25mZXNzb3Iub3JnghF3d3cuc3RmYXVzdGluYS5jYYIXd3d3
LnN0amFtZXNzY2hvb2xzYS5vcmeCG3d3dy5zdGpvaG50aGViYXB0aXN0ZGhzLm5l
dIIgd3d3LnN0bGF3cmVuY2VicmluZGlzaXdhc2tvbS5vcmeCE3d3dy5zdG1hcnkx
MTAzMC5vcmeCE3d3dy5zdG1hcnlodWRzb24uY2OCFHd3dy5zdHJvc2VzY2hvb2wu
bmV0ghZ3d3cuc3R0aG9tYXNzY2hvb2wubmV0ghN3d3cudW1uY2F0aG9saWMuY29t
ghl3d3cueW91dGhlbmNvdW50ZXI5MDYuY29tghV5b3V0aGVuY291bnRlcjkwNi5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWuh
+SmfAAAEAwBHMEUCIQDZ4Iuv1/+G3qXJPn9ttmmGG6ixDiknSlp8WyR1vIuhTwIg
cI9UySqSA9SnnAS94o/5JKpqyETabR/EKxBoskRMUWcAdgBj8tvN6DvMLM8LcoQn
V2szpI1hd4+9daY4scdoVEvYjQAAAWuh+SmMAAAEAwBHMEUCIEKq3d5TfSJB4IFV
BnbSN8BPwhCPwSdwbLqSqDOM+7aqAiEAl8iJQVBP+CrJN8J5KFBEpVuIWpbEag6p
7kU51kn2hW4wDQYJKoZIhvcNAQELBQADggEBAFTEgaqo27HkKNrdGB1l0VQWjHfo
1Gx7BWkwcP7DW/kDtrMQP6+C/9MWM7ASRyOvlWsAsz78VtIc2xoyCB3NO717VpYl
pchTaRGJEzjVTYkEhtRqE7DXGUVEDrEh15yEYaTTU3wbDbGXtDHClO0xXKg7liBW
3DhAHRLV+d3uEAMHF+BgcH/S+37yJXNShZXMuNGoNigx5RfG0I2yUd8+p/EdAGVk
zejorWA7xny7Z2kGUb096+erbisb2hHF4VcplyFvIqmvBH7t9RaILHQTsBxpgT1p
Lkdd3EAtriv1JfSjytGo1LE7d8Hb4TVIECUgTuGjZ1HBcI3RRfdGRdCq2kw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYiFZM1mrBBOsD3Sdpy
ddPddTZmUsv5XrQr89PGQhxM5tyvdCRWLBMiGdCvzr7a+8EOxGQ3brNxciLihNZV
BE1IYmeAO2zQCH8uSQhn8Cwbl6kN32sHAYxGrzD0hNZFJxDX7fcCi+TJkLAPeErD
cdwMM4fOZrZQLPWWs1LEPQsu8UpFDrErFSjZYCpfaX2kV7kPUtGjbdvOeU7S9VX9
0Ayvle7Q5AmDKcgCrphwM2mRvdv2wgZVkToVRSwLZoOCpndI/ddnYdPhW0VCD1gu
EoxVsk6cp1dz4Z/wWJGiZhsST6Wr6H1C/P6CfKne62S95ofPEvlIFdGBqRxVcs11
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316057874909564658740542884029922823261137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-29 05:43:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 05:43:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christthekingjerseycity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20745555849631805964716777681029215948032903525112064049770255699720533765996146755914380499994725049357473796176600827460303035281247744575157093744810347187232445048003861939528345867497981927582758863344418095263657508526311482215813604140819450340692772409325448715796498022449185758526744037897899044267236128799766862042657240404132942423999663418520131632006161601687484419394467988906877710519962759611598143015164695577995635349081507334396587139322517063357708780289281823136073191031331861896768965123550802622578901045998817083291801247899115276387026500006725550958780344166996930674038089838240943928817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da26f50a20a0661dace392e5d4d1f54c01b5d00c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbstorenola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingjerseycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drvcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelsregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.staugustinenj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preblecountycatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romancatholic.kingston.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjamesbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsbayshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spssmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srsny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspjschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stchris-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardconfessor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfaustina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschoolsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnthebaptistdhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencebrindisiwaskom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmary11030.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryhudson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stroseschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umncatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbstorenola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drvcschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelsregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preblecountycatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjamesbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsbayshore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spssmith.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srsny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspjschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stchris-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardconfessor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfaustina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschoolsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnthebaptistdhs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencebrindisiwaskom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmary11030.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryhudson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stroseschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umncatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youthencounter906.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthencounter906.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ba1f9299f0000040300473045022100d9e08bafd7ff86dea5c93e7f6db669861ba8b10e29274a5a7c5b2475bc8ba14f0220708f54c92a9203d4a79c04bde28ff924aa6ac844da6d1fc42b1068b2444c516700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ba1f9298c0000040300473045022042aaddde537d2241e081550676d237c04fc2108fc127706cba92a8338cfbb6aa02210097c88941504ff82ac937c279285044a55b885a96c46a0ea9ee4539d649f6856e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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