stjameswashington.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:0b:39:64:6a:83:ea:9e:55:be:65:6f:4c:17:6e:cc:97 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stjameswashington.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:0b:39:64:6a:83:ea:9e:55:be:65:6f:4c:17:6e:cc:97
Serial Number (int): 318519214943552944125818445912841221229719
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:23:97:17:44:80:13:76:95:11:d4:14:2e:c8:68:af:8a:86:7a:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:1b:5c:e2:2c:ed:2a:b5:bd:77:d5:d1:21:52:09:0f:34:25:49:3f
Fingerprint (sha256): 03:a1:ed:ab:3d:1c:dd:65:86:ef:a6:63:68:f0:db:78:a6:67:c6:82:2c:6b:70:78:6d:92:83:62:6c:58:3f:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate stjameswashington.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjameswashington.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggiecatholic.org
ascsfw.org
catholic.tulane.edu
cwiaholyspirit.org
english.dljc.org
espanol.dljc.org
fatherjoshua.com
globaloutreachprogram.com
goodshepherdchurch.us
holytrinitysat.org
hrclarksville.org
ihmparishlansing.org
jmuccm.com
mhtangleton.org
mqcatholics.org.au
nfpccanada.ca
ollchapin.org
ololchurch.org
ourladyvictory.org
parish.stanthony-clarksville.org
princeofpeaceormond.com
raidercatholics.com
sacredheartrowlett.org
sacredheartschooldc.org
saintannies.org
saintstephenchurch.org
scsglenwood.org
sjcpenfield.com
sjnfreetown.org
sjnmtl.org
stannparish.org
steulalia-stgabriel.org
stfelicitas-school.org
stignatiushickory.org
stjameswashington.org
stjoeyouth.com
stjosephcecilia.com
stjudethaddeus.net
stmartha.com
stmarygraham.org
stmaryss.org
stmaryswest.com
stmaximilian.org
stpaulowosso.org
strosesv.com
stsimonchurch.org
ststephen1885.org
thetalk.org
truecrosschurch.org
wucatholic.com
www.aggiecatholic.org
www.ascsfw.org
www.cwiaholyspirit.org
www.fatherjoshua.com
www.globaloutreachprogram.com
www.goodshepherdchurch.us
www.holytrinitysat.org
www.hrclarksville.org
www.ihmparishlansing.org
www.jmuccm.com
www.ladyofhope.org
www.mhtangleton.org
www.mqcatholics.org.au
www.nfpccanada.ca
www.ollchapin.org
www.ololchurch.org
www.ourladyvictory.org
www.princeofpeaceormond.com
www.raidercatholics.com
www.sacredheartrowlett.org
www.sacredheartschooldc.org
www.saintannies.org
www.saintstephenchurch.org
www.scsglenwood.org
www.sjcpenfield.com
www.sjnfreetown.org
www.sjnmtl.org
www.stannparish.org
www.steulalia-stgabriel.org
www.stfelicitas-school.org
www.stignatiushickory.org
www.stjoeyouth.com
www.stjosephcecilia.com
www.stjudethaddeus.net
www.stmartha.com
www.stmarygraham.org
www.stmaryss.org
www.stmaryswest.com
www.stmaximilian.org
www.stpaulowosso.org
www.strosesv.com
www.stsimonchurch.org
www.ststephen1885.org
www.thetalk.org
www.truecrosschurch.org
www.wucatholic.com
www.ysucsa.org
ysucsa.org

Other certificates including the domain name stjameswashington.org

(limited to 100 certificates)
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
christthekingparish.org
stjameswashington.org
christthekingparish.org
stjameswashington.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
christthekingparish.org

Certificate

The complete raw certificate details for stjameswashington.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthQwEWkR7yEbbZMhkPa9
Ecbd2xMo0H2C8z6qU1RvhBeX4LK+zTUE3+zQTbckDt29I3+59i7rAOT8sJCmIXVq
dK4uzm3wXJ6AqC3sjOwVkUhb356Y5bMtimwwZcmeiHXT7psgSIq6AuwAV8cPkn0N
eWKDabXGtIbTmu/7MfgMc6LM7/zOxXLeKSdpqioBOYvOYha6EBrRu67TZyzcddrM
s46lMr0Cwk7RkIcTYDYpTXwI+L70gg35qTqfyFUINokmLJghC4GMZa6Y6XcMLv16
1ivkafGpK+HlfnSdttJZCXT1R4jAjN2m44ssJWzhHtCSateFwBM/9H+aPwXTp+kk
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318519214943552944125818445912841221229719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 04:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 04:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjameswashington.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22985326462097015540367179933608612862432597918190343574295542032301755739474590461643990711528039084092655953679553799554807067108716621743544691082437953852166543570428554057746749096416346289836503658867273460606345005285130931637299907179187061085278485237768776606052459142557697117197693329182981154959362012327728272808890941269475980802891646273667029182994181377364150772155053530777278026691843999429182539363614709620559703333178226065865805115434789039056232961005248611497716075504189755603348820851249378222563574240623118332077010690110226418141409390235384497375950029446623176862214773430208757834933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29239717448013769511d4142ec868af8a867a41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.dljc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.dljc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stanthony-clarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephcecilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wucatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephcecilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wucatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ysucsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysucsa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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