www.sscmshiner.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a4:e0:b4:93:4d:7f:0b:f9:05:6b:48:a0:dc:3d:6c:c7:6e was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sscmshiner.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:e0:b4:93:4d:7f:0b:f9:05:6b:48:a0:dc:3d:6c:c7:6e
Serial Number (int): 404554136574219351339787073359918855407470
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1a:d0:26:42:f6:ee:94:27:9f:2c:96:4d:fb:11:8b:92:5c:42:14:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:5c:69:c7:3b:a5:d5:c1:a8:ce:67:d0:d6:41:10:d4:48:31:0a:a5
Fingerprint (sha256): 01:4a:0f:7d:a5:80:54:ee:2c:58:1a:61:c9:ca:62:0b:cf:e0:80:fd:65:ff:7a:cb:f8:be:5d:1a:60:29:51:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sscmshiner.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sscmshiner.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blessedsacramentwv.org
borromeochurch.org
ctkph.org
holyfamilywy.org
htrccsherman.org
ihmkelso.org
jesusthedivinemercy.com
koojradio.com
maryqueenschool.org
melbournecc.org
nativitysouthamherst.com
nativitystmary.org
ologs.org
olphbc.org
parish.ctkcatholic.com
perg-tamu.com
religiousramblers.com
sacredheartchapel.com
saintrosechurch.net
school.olphbc.org
sfcabrini.us
shinercatholicschool.org
smmchurch.org
sps-tn.org
sscmshiner.org
stabcs.org
standrews-delavan.org
stannpv.org
staugustinecatholicparish.org
stchristophersi.org
stcolumbkill.org
stjameseganville.com
stjoesmhd.com
stjohnminot.com
stjosephinez.org
stjudedewitt.com
stmarymaplepark.org
stmaryslg.org
stmaryvermilion.org
stpatrickamboy.org
stpeterschoolaurora.org
stthomasamarillo.org
test.ecatholic.com
thisrockradio.com
transfiguration-tarrytown.org
txelitebasketball.com
winonanewman.org
www.blessedsacramentwv.org
www.borromeochurch.org
www.ctkph.org
www.holyfamilywy.org
www.htrccsherman.org
www.ihmkelso.org
www.jesusthedivinemercy.com
www.koojradio.com
www.maryqueenschool.org
www.melbournecc.org
www.nativitysouthamherst.com
www.nativitystmary.com
www.nativitystmary.org
www.ologs.org
www.olphbc.org
www.parish.ctkcatholic.com
www.perg-tamu.com
www.religiousramblers.com
www.sacredheartchapel.com
www.saintrosechurch.net
www.sfcabrini.us
www.shinercatholicschool.org
www.smmchurch.org
www.sps-tn.org
www.sscmshiner.org
www.stabcs.org
www.standrews-delavan.org
www.stannpv.org
www.staugustinecatholicparish.org
www.stchristophersi.org
www.stcolumbkill.org
www.stjameseganville.com
www.stjoesmhd.com
www.stjohnminot.com
www.stjosephinez.org
www.stjudedewitt.com
www.stmarymaplepark.org
www.stmaryslg.org
www.stmaryvermilion.org
www.stpatrickamboy.org
www.stpeterschoolaurora.org
www.stthomasamarillo.org
www.test.ecatholic.com
www.thisrockradio.com
www.transfiguration-tarrytown.org
www.txelitebasketball.com
www.winonanewman.org

Other certificates including the domain name sscmshiner.org

(limited to 100 certificates)
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org

Certificate

The complete raw certificate details for www.sscmshiner.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMxDCCC6ygAwIBAgISBKTgtJNNfwv5BWtIoNw9bMduMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MjkwNTQ1MDBaFw0x
NzEwMjcwNTQ1MDBaMB0xGzAZBgNVBAMTEnd3dy5zc2Ntc2hpbmVyLm9yZzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANzvRrQG7KlJJZQcUt/O+U36Gpu0
lBSQIQJ56kcf53lhq6BtIfUAIrcGe6d4JnpG0XZf9EzOEqp43Sg207wI9Oj9YT4d
QAKrEXXxy0uTPZz11UjiQ2jQaL9pux++nfaeKzxSwdYS6OnZ1spKb6g9u+3YJbiN
f0JAeNB1MGYh+8WrBhkxqZvZN1bxkJJclxMqy1T+KERg6rx1BGeQBpfldmB4+4xs
rTbouOYBD4YO5MEa5vE9hkQXbfqV8FGnnHuJ8bu8m/7TBrWj4XeUa+kuHIFPWnjI
dtwfrmkQ+zrbYBbgDa0oTxnb52VOEC9L3c5dpLEcMCwVGoK588IOUcXabAkCAwEA
AaOCCc8wggnLMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGtAmQvbulCefLJZN+xGL
klxCFHgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCB9gGA1UdEQSCB88wggfLghZibGVzc2Vkc2FjcmFtZW50d3Yub3Jn
ghJib3Jyb21lb2NodXJjaC5vcmeCCWN0a3BoLm9yZ4IQaG9seWZhbWlseXd5Lm9y
Z4IQaHRyY2NzaGVybWFuLm9yZ4IMaWhta2Vsc28ub3JnghdqZXN1c3RoZWRpdmlu
ZW1lcmN5LmNvbYINa29vanJhZGlvLmNvbYITbWFyeXF1ZWVuc2Nob29sLm9yZ4IP
bWVsYm91cm5lY2Mub3JnghhuYXRpdml0eXNvdXRoYW1oZXJzdC5jb22CEm5hdGl2
aXR5c3RtYXJ5Lm9yZ4IJb2xvZ3Mub3JnggpvbHBoYmMub3JnghZwYXJpc2guY3Rr
Y2F0aG9saWMuY29tgg1wZXJnLXRhbXUuY29tghVyZWxpZ2lvdXNyYW1ibGVycy5j
b22CFXNhY3JlZGhlYXJ0Y2hhcGVsLmNvbYITc2FpbnRyb3NlY2h1cmNoLm5ldIIR
c2Nob29sLm9scGhiYy5vcmeCDHNmY2FicmluaS51c4IYc2hpbmVyY2F0aG9saWNz
Y2hvb2wub3Jngg1zbW1jaHVyY2gub3JnggpzcHMtdG4ub3Jngg5zc2Ntc2hpbmVy
Lm9yZ4IKc3RhYmNzLm9yZ4IVc3RhbmRyZXdzLWRlbGF2YW4ub3JnggtzdGFubnB2
Lm9yZ4Idc3RhdWd1c3RpbmVjYXRob2xpY3BhcmlzaC5vcmeCE3N0Y2hyaXN0b3Bo
ZXJzaS5vcmeCEHN0Y29sdW1ia2lsbC5vcmeCFHN0amFtZXNlZ2FudmlsbGUuY29t
gg1zdGpvZXNtaGQuY29tgg9zdGpvaG5taW5vdC5jb22CEHN0am9zZXBoaW5lei5v
cmeCEHN0anVkZWRld2l0dC5jb22CE3N0bWFyeW1hcGxlcGFyay5vcmeCDXN0bWFy
eXNsZy5vcmeCE3N0bWFyeXZlcm1pbGlvbi5vcmeCEnN0cGF0cmlja2FtYm95Lm9y
Z4IXc3RwZXRlcnNjaG9vbGF1cm9yYS5vcmeCFHN0dGhvbWFzYW1hcmlsbG8ub3Jn
ghJ0ZXN0LmVjYXRob2xpYy5jb22CEXRoaXNyb2NrcmFkaW8uY29tgh10cmFuc2Zp
Z3VyYXRpb24tdGFycnl0b3duLm9yZ4IVdHhlbGl0ZWJhc2tldGJhbGwuY29tghB3
aW5vbmFuZXdtYW4ub3Jnghp3d3cuYmxlc3NlZHNhY3JhbWVudHd2Lm9yZ4IWd3d3
LmJvcnJvbWVvY2h1cmNoLm9yZ4INd3d3LmN0a3BoLm9yZ4IUd3d3LmhvbHlmYW1p
bHl3eS5vcmeCFHd3dy5odHJjY3NoZXJtYW4ub3JnghB3d3cuaWhta2Vsc28ub3Jn
ght3d3cuamVzdXN0aGVkaXZpbmVtZXJjeS5jb22CEXd3dy5rb29qcmFkaW8uY29t
ghd3d3cubWFyeXF1ZWVuc2Nob29sLm9yZ4ITd3d3Lm1lbGJvdXJuZWNjLm9yZ4Ic
d3d3Lm5hdGl2aXR5c291dGhhbWhlcnN0LmNvbYIWd3d3Lm5hdGl2aXR5c3RtYXJ5
LmNvbYIWd3d3Lm5hdGl2aXR5c3RtYXJ5Lm9yZ4INd3d3Lm9sb2dzLm9yZ4IOd3d3
Lm9scGhiYy5vcmeCGnd3dy5wYXJpc2guY3RrY2F0aG9saWMuY29tghF3d3cucGVy
Zy10YW11LmNvbYIZd3d3LnJlbGlnaW91c3JhbWJsZXJzLmNvbYIZd3d3LnNhY3Jl
ZGhlYXJ0Y2hhcGVsLmNvbYIXd3d3LnNhaW50cm9zZWNodXJjaC5uZXSCEHd3dy5z
ZmNhYnJpbmkudXOCHHd3dy5zaGluZXJjYXRob2xpY3NjaG9vbC5vcmeCEXd3dy5z
bW1jaHVyY2gub3Jngg53d3cuc3BzLXRuLm9yZ4ISd3d3LnNzY21zaGluZXIub3Jn
gg53d3cuc3RhYmNzLm9yZ4IZd3d3LnN0YW5kcmV3cy1kZWxhdmFuLm9yZ4IPd3d3
LnN0YW5ucHYub3JngiF3d3cuc3RhdWd1c3RpbmVjYXRob2xpY3BhcmlzaC5vcmeC
F3d3dy5zdGNocmlzdG9waGVyc2kub3JnghR3d3cuc3Rjb2x1bWJraWxsLm9yZ4IY
d3d3LnN0amFtZXNlZ2FudmlsbGUuY29tghF3d3cuc3Rqb2VzbWhkLmNvbYITd3d3
LnN0am9obm1pbm90LmNvbYIUd3d3LnN0am9zZXBoaW5lei5vcmeCFHd3dy5zdGp1
ZGVkZXdpdHQuY29tghd3d3cuc3RtYXJ5bWFwbGVwYXJrLm9yZ4IRd3d3LnN0bWFy
eXNsZy5vcmeCF3d3dy5zdG1hcnl2ZXJtaWxpb24ub3JnghZ3d3cuc3RwYXRyaWNr
YW1ib3kub3Jnght3d3cuc3RwZXRlcnNjaG9vbGF1cm9yYS5vcmeCGHd3dy5zdHRo
b21hc2FtYXJpbGxvLm9yZ4IWd3d3LnRlc3QuZWNhdGhvbGljLmNvbYIVd3d3LnRo
aXNyb2NrcmFkaW8uY29tgiF3d3cudHJhbnNmaWd1cmF0aW9uLXRhcnJ5dG93bi5v
cmeCGXd3dy50eGVsaXRlYmFza2V0YmFsbC5jb22CFHd3dy53aW5vbmFuZXdtYW4u
b3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF
BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv
biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo
IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j
cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHX/W7ji/+cq
UT285tgKSt0wNDU9F+Umu4bQhGZ+Uneyh4QYW3IfS6qNhSvmRs9/3+ZAWwgWlb45
lN6k4KtsjQoV5S0ZHCQTHCK8ZnJ06LkeEVCNTcV+hQdwOFpSXt0E8W6umUCKX2Pa
Y4t8UC5WQ88QMY4KB9PKu38J5HSvDp8IvWx6/fzGas2hCTDqgUea3QJCAC/QwC3G
4GX1BCt84CdKzcMExTbKTBPS8FpahkojIvSnjIF9QQ0i0ONTxHOFR9nmP4yWR2QX
GZU9YChxVXScFoqD0fmby0jnfPXy2q5k4JmpT1H87yEucUkjcDUtGKU0pdrAuLOW
Lvx/usgiSPk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O9GtAbsqUkllBxS3875
Tfoam7SUFJAhAnnqRx/neWGroG0h9QAitwZ7p3gmekbRdl/0TM4SqnjdKDbTvAj0
6P1hPh1AAqsRdfHLS5M9nPXVSOJDaNBov2m7H76d9p4rPFLB1hLo6dnWykpvqD27
7dgluI1/QkB40HUwZiH7xasGGTGpm9k3VvGQklyXEyrLVP4oRGDqvHUEZ5AGl+V2
YHj7jGytNui45gEPhg7kwRrm8T2GRBdt+pXwUaece4nxu7yb/tMGtaPhd5Rr6S4c
gU9aeMh23B+uaRD7OttgFuANrShPGdvnZU4QL0vdzl2ksRwwLBUagrnzwg5Rxdps
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404554136574219351339787073359918855407470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-29 05:45:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 05:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sscmshiner.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27890418576710102216165304583618186845948902658909817747008497661792270042545796819000963690288314858251860308810749127541059963086011189147956111468675334383593840887861905291113864179214106823377182978541684558343215484156763246589767158220945497329557736938107422308635283064754561694906284373323976864782577796670750994978033803376501946236342590000546146907736423483456143879943484083546432572030001950296999108580077100424063263805610188648829513376467976530215110841551039295482878661428075811556198115300994833858282681970748648533619939362706591339816429728765867180094474122561871725000052989681304851868681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ad02642f6ee94279f2c964dfb118b925c421478
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borromeochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilywy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htrccsherman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmkelso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusthedivinemercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koojradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryqueenschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitysouthamherst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perg-tamu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religiousramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintrosechurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcabrini.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinercatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-tn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmshiner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stabcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standrews-delavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staugustinecatholicparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stchristophersi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbkill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjameseganville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoesmhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephinez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudedewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarymaplepark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryvermilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickamboy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterschoolaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisrockradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txelitebasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winonanewman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borromeochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilywy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htrccsherman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihmkelso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusthedivinemercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koojradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryqueenschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbournecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitysouthamherst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perg-tamu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.religiousramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintrosechurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfcabrini.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinercatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sps-tn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmshiner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stabcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standrews-delavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinecatholicparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stchristophersi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbkill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameseganville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoesmhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephinez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudedewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarymaplepark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryvermilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickamboy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterschoolaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thisrockradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txelitebasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winonanewman.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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