www.transfiguration-tarrytown.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:c2:25:33:3a:f9:cd:f3:6a:c6:a5:f2:a0:a0:0a:05:d0 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.transfiguration-tarrytown.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:c2:25:33:3a:f9:cd:f3:6a:c6:a5:f2:a0:a0:0a:05:d0
Serial Number (int): 334755630068523983011268616749214729897424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:3f:27:07:9c:ec:5c:ee:36:59:21:07:37:db:09:6c:8a:a3:b7:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:4c:ba:4b:7d:2b:a8:99:ba:72:6f:42:6c:69:89:93:4b:4a:0d:d9
Fingerprint (sha256): 0e:04:c8:c7:a0:15:00:e7:32:f7:9d:86:74:59:c6:05:b7:64:67:ee:48:41:15:76:86:23:f4:98:ca:f0:8d:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.transfiguration-tarrytown.org

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.transfiguration-tarrytown.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsvillage.com
catholicfoundationlubbock.org
catholicmavs.org
christthekingschool.net
corpuschristi-detroit.org
ctkcathedral.org
friendsofthecathedral.org
goliadcatholic.org
hfwharton.org
holyfamily-vanalstyne.org
holyfamilytym.com
holyfamilyvb.org
iccorsicana.org
johnmichaeltalbot.com
miyouth.org
nativitystmary.com
nativitystmary.org
newarkoym.com
olgcchurch.org
ourladyrockwall.org
parish.ctkcatholic.com
pothe.org
sacredhearthidalgo.org
sacredheartsusanville.org
sacredheartwf.org
saintlawrencebasilica.org
sbscrusaders.com
sscmchurch.org
st-mm.com
stcatherine-austin.org
stcharlesabq.org
stgabriel.org
sthelenslangside.org.uk
stjeromehou.org
stjoachim.org
stjohn-mcalester.org
stjosephbcs.org
stmargaret-homer.org
stmarysnorton.com
stmarystaylor.org
stmarystpatrick.net
stmichaelmaine.org
stpatrickdallas.org
stpiusxsa.org
stromualdschool.org
transfiguration-tarrytown.org
www.allsaintsvillage.com
www.catholicfoundationlubbock.org
www.catholicmavs.org
www.christthekingschool.net
www.corpuschristi-detroit.org
www.ctkcathedral.org
www.friendsofthecathedral.org
www.goliadcatholic.org
www.hfwharton.org
www.holyfamily-vanalstyne.org
www.holyfamilytym.com
www.holyfamilyvb.org
www.iccorsicana.org
www.johnmichaeltalbot.com
www.miyouth.org
www.nativitystmary.com
www.nativitystmary.org
www.newarkoym.com
www.olgcchurch.org
www.olqh.org
www.ourladyrockwall.org
www.parish.ctkcatholic.com
www.pothe.org
www.sacredhearthidalgo.org
www.sacredheartsusanville.org
www.sacredheartwf.org
www.saintlawrencebasilica.org
www.sbscrusaders.com
www.sscmchurch.org
www.st-mm.com
www.stcatherine-austin.org
www.stcharlesabq.org
www.stgabriel.org
www.sthelenslangside.org.uk
www.stjeromehou.org
www.stjoachim.org
www.stjohn-mcalester.org
www.stjosephbcs.org
www.stmargaret-homer.org
www.stmarysnorton.com
www.stmarystaylor.org
www.stmarystpatrick.net
www.stmichaelmaine.org
www.stpatrickdallas.org
www.stpiusxsa.org
www.stromualdschool.org
www.transfiguration-tarrytown.org

Other certificates including the domain name transfiguration-tarrytown.org

(limited to 100 certificates)
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org

Certificate

The complete raw certificate details for www.transfiguration-tarrytown.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8why3SL/BW/DD3fH/3ko
qJ2bLgJHIWbTy/6/dXgSiFNLKqhOxTKsJ1lMpYCoh394BjWnkf7DaVo6n0BExsog
FVVXikzfAPoZ6fYU8spuPR7yZbbhJ7GFCB1ZW21PRu1g0y4fmNTFXfy+p6UEoVK/
SLlGAZX+UAXcUmzQFbAwWiMFuqPGEQtfjpm59Z6Y/Eh+T783T3HFOVRaWR54lCWR
PyO3hrpooygjPoomia94kDjc3xDpJZ8DIRxLnwViWpW/sQ++XKa+l7rKZOejMVC1
t0SUPEtyBwlOqZjqo5cNJHPkfEKzuJ5P+pL2GLjfqdsc8oN/ph0QWTiqlsWEedoN
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334755630068523983011268616749214729897424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 05:36:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 05:36:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.transfiguration-tarrytown.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30680074309479135645074617280881042035628492157018075801800724566964555754287790914812014203057453380725150434423965267885985027055383673487867261522862791592828474922976376440540986870261361229368173662678161347626290046832583445562437708844492087758935967577515847498336100996327918895748292453104030477705768517727953393605853781056073376676253351160440400361467310539653674555217566936836585826355751549182563720150541433085459507248698451214799873216378296799311604769493402215473648197857897750877122636328139861650438882751234005596019133514295222188820185231422492583792965365369123117416825410577355570285987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b3f27079cec5cee3659210737db096c8aa3b7d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2064 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmavs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliadcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iccorsicana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newarkoym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyrockwall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pothe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredhearthidalgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlawrencebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherine-austin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromehou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohn-mcalester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephbcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystpatrick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicmavs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goliadcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iccorsicana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newarkoym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyrockwall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pothe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredhearthidalgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlawrencebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherine-austin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromehou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohn-mcalester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephbcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystpatrick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b4f8d7f660000040300473045022100c1c6bef2fcae0243c11a87d580c877d3ecbc8707f554fd7b8a110d79cb317cd7022072a1435faeb0dd4d39d25f61ca797c5afa79975061b06e1c97bc18bdc507e19200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b4f8d7f2f000004030047304502203b31cf7bbd83690e73a351d0788e8aa3fb60e5e6f4e65622bc3034f207ce020a022100991dbcceccae7e2a25b23bf55a7573b0812798687019b32cb964469437264ac2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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