www.stbensnd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:44:f6:80:0a:ea:83:b3:d3:56:c8:c0:da:19:56:45:ca:61 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stbensnd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:f6:80:0a:ea:83:b3:d3:56:c8:c0:da:19:56:45:ca:61
Serial Number (int): 371915999600030029861558939892476639824481
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:f7:50:e8:94:a6:43:eb:d1:0a:f7:89:53:15:23:6b:3c:cf:5c:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:a8:e9:71:d5:b7:9a:96:47:12:bc:0a:f6:71:a0:96:d1:87:eb:64
Fingerprint (sha256): 0a:bc:e8:90:d6:7d:e0:43:45:7e:21:6f:59:96:4a:45:a7:d7:56:27:84:7a:0e:7c:7f:4c:56:da:7a:9d:f5:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stbensnd.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stbensnd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsheights.com
catholicyouthri.com
catholicyouthri.org
centralmcleansaints.com
charityguildshop.org
heargodscall.com
holy-rosary.org
kenperronbuilder.com
kidcause.org
pophouston.org.es
sacredheartofjesusonline.org
saint-albert.org
saintmartindetours.org
saintsppta.org
sanjuandiegodallas.org
sjbde.org
sjcparish.org
sjsmst.org
spxschool.org
srolparish.org
st-peter-church.com
stannegorham.com
stbensnd.org
stbridgetchurch.org
stceciliachurch.org
stgregorys.net
stjohnschoolwinslow.org
stjosephriovista.org
stjparish.com
stmaryelyria.org
stmaryfreeport.com
stncc.net
stpatrickindependence.com
stpaulsmissiontx.org
stphilipcs.com
stsja.org
sttheresa-littleeggharbor.com
stvincentdepauldc.org
stvincentpampa.com
tccesdover.org
test.ecatholic.com
thomasmorechurch.org
vitanova.org
wtcsc.org
www.allsaintsheights.com
www.catholicyouthri.com
www.catholicyouthri.org
www.centralmcleansaints.com
www.charityguildshop.org
www.csdo.org
www.heargodscall.com
www.holy-rosary.org
www.kenperronbuilder.com
www.kidcause.org
www.pophouston.org.es
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintmartindetours.org
www.saintsppta.org
www.sanjuandiegodallas.org
www.sjbde.org
www.sjcparish.org
www.sjsmst.org
www.spxschool.org
www.srolparish.org
www.st-peter-church.com
www.stannegorham.com
www.stbensnd.org
www.stbridgetchurch.org
www.stceciliachurch.org
www.stgregorys.net
www.stjohnschoolwinslow.org
www.stjosephriovista.org
www.stjparish.com
www.stmaryelyria.org
www.stmaryfreeport.com
www.stncc.net
www.stpatrickindependence.com
www.stpaulsmissiontx.org
www.stphilipcs.com
www.stsja.org
www.sttheresa-littleeggharbor.com
www.stvincentdepauldc.org
www.stvincentpampa.com
www.tccesdover.org
www.thomasmorechurch.org
www.vitanova.org
www.wtcsc.org
www.ymcyoprov.com
ymcyoprov.com

Other certificates including the domain name stbensnd.org

(limited to 100 certificates)
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org

Certificate

The complete raw certificate details for www.stbensnd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RfHPeI/mdCfcHK0CY4O
oAaEqT51kMkoNG812gu2s7VW/rKLAkfY7slf8nAr6fzXRyKcgMRWTedTYQO2y4ZY
3Fq4dNMdtdcfaWCEsncl+eSd2U80bNWGK3FCNlcHYFcVXKcRQPV3W60A9yaTlmdX
r4inbSY8zsqTGinZ0eVtQHo30LiCZDQK4/i5FfULynU2DDLTYVNL5KVo/1GL5Eq2
HjGeYLYNpWnmoRWB/Mlbn1rCUkuCRna2JFwrQbuhNIEqzqQu4AdqsSfuJhjEBhcK
httclI1P2dcGu0TVbsDQjs5i49x5WUQi44oah4fZA24b0HRp/o+N/qp5wm9hpJIF
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371915999600030029861558939892476639824481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-15 05:11:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-13 05:11:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stbensnd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28920297348066644626831349587016644671231534361788329671790811752278913393353335331899193122015139172935061167097847106731983834404503272773463627983107231991956350075468789808758221604136093648579626675237242129983023892863367828993277205086603336820835560918926498792357136329767984040289694073315534868935136559758357666347610156132239816320931233552231878344628512465343400382325740006546373484503296304729786383810549129985757513761801996484576390912483621082579078604285973193232834440030480222106088573443981234004010592183006835665046147244142415992152746676935979681118465719223393990501372948678892646958479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1f750e894a643ebd10af7895315236b3ccf5ca4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcyoprov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcyoprov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00564bdc4dc3c85adb65971214c6ea7360973254fb0ca03b576426c53343ac3dec28294f349e471bfa8ac78be158d13632b3efd5767a82f7ca9900e503d22e3bdfbfecd8b40abe3fd94e7f1fe9b2f8de25cfc26829710ef8889bec039eed0630fd34a50b3f983150792f0abf92dc43ab73d19338b73de456bcdf09fff3730106f1957c357246a4a97a6326ab71f0c8927c9986411ae219b0ed07d87fae39aaa07724ae1c991513a8fd1fac8322c5b41429e8d8fe58660a9cfe66b435ded3b5b7056c14ddf331b4a566729ce1c3f6684feb3d4a4833dfd880db7db0a53193b4162741b3591da6a9aec6ec816554c9448f9d37cd6f4466a8f6117434bb99eb1b3ffe