stjosephok.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:05:3e:92:1c:15:da:8d:39:23:d9:10:ea:d9:44:73:df:13 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stjosephok.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:3e:92:1c:15:da:8d:39:23:d9:10:ea:d9:44:73:df:13
Serial Number (int): 350233726342364588548330381211048378359571
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:94:0b:47:41:91:ef:b6:9a:2b:58:2d:52:a3:dd:f2:86:e9:65:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:bb:40:3a:f2:06:df:e2:af:af:dd:45:51:0b:45:ab:fd:7e:33:32
Fingerprint (sha256): 10:b6:59:87:5d:ba:71:81:0d:75:dc:63:d3:19:67:88:bd:94:b0:77:ff:e6:63:c5:73:33:af:e8:0e:fc:76:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stjosephok.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjosephok.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actscommunityoflubbock.org
actshouston.org
annunciationfrankfort.org
catholicottawa.ca
catholiqueottawa.ca
ccapeo.org
deleitededios.org
eng.alexandria-cornwall.ca
fr.alexandria-cornwall.ca
holyrosary.edu
holyrosarychurch.us
holyspiritrochester.org
htccd.org
icomparish.org
jpgacademy.org
littleportion.org
manchestermedjugorjecentre.org
mpregional.org
nativitymary.org
nativitymen.org
ncaddhm.org
olpmn.org
peoriacursillo.org
peoriatec.org
preciousbloodssm.com
presentationschool.net
saintedward.org
saintjosephsacramento.org
saintpriscilla.org
school.olpmn.org
sfayouth.net
sjcherndon.org
smdpcatholic.com
solthaitimission.org
stanneslodi.org
staopcs.org
stjoan.net
stjohnfairport.org
stjosepheppingnh.com
stjosephok.com
stjosephparish.com
stjsa.org
stm-ou.org
stmarycctc.org
stmarylanesville.org
stmarysalton.com
stmarysdowntown.org
stmichaelparish.org
stmichaelsauburn.com
stsusanna.org
www.actscommunityoflubbock.org
www.actshouston.org
www.annunciationfrankfort.org
www.catholicottawa.ca
www.catholiqueottawa.ca
www.ccapeo.org
www.deleitededios.org
www.holyrosary.edu
www.holyrosarychurch.us
www.holyspiritrochester.org
www.htccd.org
www.icomparish.org
www.jpgacademy.org
www.littleportion.org
www.manchestermedjugorjecentre.org
www.mpregional.org
www.nativitymary.org
www.nativitymen.org
www.ncaddhm.org
www.olpmn.org
www.peoriacursillo.org
www.peoriatec.org
www.preciousbloodssm.com
www.presentationschool.net
www.saintedward.org
www.saintjosephsacramento.org
www.saintpriscilla.org
www.school.olpmn.org
www.sfayouth.net
www.sjascs.org
www.sjcherndon.org
www.smdpcatholic.com
www.solthaitimission.org
www.stanneslodi.org
www.staopcs.org
www.stjoan.net
www.stjohnfairport.org
www.stjosepheppingnh.com
www.stjosephparish.com
www.stjsa.org
www.stm-ou.org
www.stmarycctc.org
www.stmarylanesville.org
www.stmarysalton.com
www.stmarysdowntown.org
www.stmichaelparish.org
www.stmichaelsauburn.com
www.stsusanna.org
www.youth2000usa.org
youth2000usa.org

Other certificates including the domain name stjosephok.com

(limited to 100 certificates)
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjohnchrysostom.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
andrewcc.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
hoxieseguinparishes.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org

Certificate

The complete raw certificate details for stjosephok.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzP9qFwNx5rnlMmpMkU
XAqo0r+SL+YumaG1+ki+b1s3K/8WFWJ+XnRQqXIJVTIoDcYM4/WGJqRMYhYhiBGV
kDPQctIUesYNnu8v4Zr6DSm1989WMHolWnp6XzPasajobm6eHGpCJqi3E0tSpDPF
yuFyatPHxrkI+8F5mWxc0fkn/6Nkip4r7zHA03kyGzmxMZWzIeZlOwRySabhbwqL
uAlAFeuJJFxFBqd66MEivTzsyQ+pe42Zq8wDpDRBXzX72r8y0L+S3T07hmSUGJfS
f0T7cPHFYlRR6e4AJKc766z51tDq0VLkVJrFNbGjixfvlH6rlByANqEugA/jFhdm
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350233726342364588548330381211048378359571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-18 05:17:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 05:17:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjosephok.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23407743791812280717052506462640448809792334094955188554393378120012772700055938681528057686457309985685866658486623945231663728357000618035776876594670185981042085356873867886217595455719194114850943660344141808110338015049225831541644971980829902432249978916965287445538428343067857439482736733753346179998690961767410329196047773490906822527565312061127153826200157715890021773285632677655448654400953436531171982882626351436982467023991801671110167419258316962391636280186806851376472324935370464221143974396051204672158009526101912625799078892761812395158306597846157058776956090426838994598770212016845049259581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e940b474191efb69a2b582d52a3ddf286e96574
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actscommunityoflubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actshouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleitededios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.alexandria-cornwall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.alexandria-cornwall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarychurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htccd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpgacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littleportion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchestermedjugorjecentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaddhm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoriacursillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoriatec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentationschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintedward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjosephsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpriscilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcherndon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smdpcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanneslodi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staopcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnfairport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosepheppingnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarycctc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysdowntown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelsauburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsusanna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actscommunityoflubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actshouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccapeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleitededios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarychurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htccd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icomparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpgacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littleportion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchestermedjugorjecentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncaddhm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriacursillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriatec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presentationschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintedward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosephsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpriscilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjascs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcherndon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smdpcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanneslodi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staopcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnfairport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosepheppingnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarycctc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysdowntown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelsauburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsusanna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youth2000usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youth2000usa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b7d8a9505cc3fdbc824f0d75332920e865de1c87f8507e7cf8a13f301fe271a6eaba2a3f0f97d2700726a3e76ebb135f50bc558b7cb3a668256e8645bc9d613b838e4b76393248a59a6d7abf31c5595cc36dd32c89cf285ecd9253b52bbf39c7fcf756d4dd9a7c1a982946e82cf6b64f29a5c7a612b1f743e09cf2a40cfc6988ca10c330871f0a53c2ad09268a444ec41dd9cd90d616148c63cdf1e5a7e223eddd544f58908673d84e1dcb4bd7bf070766fcaa10bd03199890ecc640a5d13cd383a74ae66fcebdcfc122b576407cdf3558ffec668ca2d1326790d6be5a1ccb7479c724e4c1cb0fa92e524dc09f789d03b25c65e332d92c95e00cb44c8486731