holycrossaustin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:c5:6c:9d:84:fe:10:c2:ac:3c:ec:2d:86:fa:6f:c7:5e was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holycrossaustin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:c5:6c:9d:84:fe:10:c2:ac:3c:ec:2d:86:fa:6f:c7:5e
Serial Number (int): 262620126774148960198426965809144961943390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:6e:1d:05:40:16:c6:eb:ff:25:b2:7e:b9:33:45:aa:56:66:c8:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:7f:64:a1:c9:9c:61:ce:30:5b:d8:dd:76:be:40:b3:2b:6a:59:da
Fingerprint (sha256): 12:9b:dd:31:96:2d:b0:c6:94:f5:47:b4:85:81:09:81:33:cc:9f:86:68:a9:c1:a0:89:21:0e:8c:51:58:04:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holycrossaustin.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holycrossaustin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsamarillo.org
asagr.org
avosa.org
catholicusf.org
ciscoholyrosary.com
cmvic.net
ctkmandan.com
duluthcathmed.org
epiphanystl.org
holycrossaustin.org
ihrc.net
jesusloveshallreign.net
kjtnet.org
mayjesuschristbepraised.com
mercycenter.com
missionsanfranciscodelaespada.org
moorestownknights.org
mountaineercatholic.com
mountcarmelsaipan.com
mystpatricks.com
olgtemple.org
ourladyofmercyhillsboro.org
ourladyoftheplains.org
queenofangelschurch.org
sacredheartbushwood.org
saintandrewwright.org
saintantoninus.org
saintbernardbelfield.com
school.morecommunity.org
st-matthias.net
stadalbertschool.net
stambroselatham.com
stbasilvallejo.org
stbrendans.net
steustachiusparish.com
stfrancis-church.org
stjulianaccf.org
stlawrencementor.org
stmatthewhou.org
stmvictoria.org
stpeterlindsay.org
strichards.com
stritaparish.net
sttitus.org
stwilliams.org
swsaints.org
thebasilica.org
uscatholicmission.org
www.actsamarillo.org
www.asagr.org
www.avosa.org
www.catholicusf.org
www.ciscoholyrosary.com
www.cmvic.net
www.ctkmandan.com
www.duluthcathmed.org
www.epiphanystl.org
www.ihrc.net
www.jesusloveshallreign.net
www.kjtnet.org
www.mayjesuschristbepraised.com
www.mercycenter.com
www.missionsanfranciscodelaespada.org
www.moorestownknights.org
www.mountaineercatholic.com
www.mountcarmelsaipan.com
www.mystpatricks.com
www.olgtemple.org
www.ourladyofmercyhillsboro.org
www.ourladyoftheplains.org
www.queenofangelschurch.org
www.sacredheartbushwood.org
www.saintandrewwright.org
www.saintantoninus.org
www.saintbernardbelfield.com
www.st-matthias.net
www.stadalbertschool.net
www.stambroselatham.com
www.stbasilvallejo.org
www.stbrendans.net
www.steustachiusparish.com
www.stfrancis-church.org
www.stjulianaccf.org
www.stlawrencementor.org
www.stmatthewhou.org
www.stmvictoria.org
www.stpeterlindsay.org
www.strichards.com
www.stritaparish.net
www.sttitus.org
www.stwilliams.org
www.swsaints.org
www.thebasilica.org
www.uscatholicmission.org

Other certificates including the domain name holycrossaustin.org

(limited to 100 certificates)
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org

Certificate

The complete raw certificate details for holycrossaustin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uqYlllA4cI37pcvV1y8
Yll+WapwOWCWb6WD5vkgOxc+WCs9PDHPZUk6TGT8Kc+5VeakKoB7SliKSWzEGxZZ
bDdDpuCETgCNZr+cNnAgoOJ4hlNnh4H/o2xDXXD/1sVNwqT3vXVZfqSPRBWRvUKi
jU1Ml72N7TZMAv751qaOGSIzfwd+p/hjLAZ0yv0LfjkYvwxwsVYEgEQ3eOZtseUi
CuGx9OqDUC211FaHw02TVnkt6nSDcufuXhUd8zZjHF0EKmL9oxq9XPd6nsfO9Kk9
F2DAm6FJOJ+6+59vi6wj43fObuKsuUS4hXRzDDk0JEVWBeG4N4456uKhKcOKC59W
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262620126774148960198426965809144961943390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 20:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 20:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holycrossaustin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27130680883688728934482096073030579884810223632132529912749709961663929566040650442120233242052512434851985568441992699714067399066387093858745754509089701455770921953600752475677787625048422481869295466520011732075976431566696887668387361357127195237118752818283201657380546167148385356597853638182893813968953599318568755263317923537558141869794184635898089929575845386899013391670139765620617644488476355175281198454247291231068232803340418004880476827123031382573149539254904619471112958674433710280197634796987094674834201057325737858637686743328113009940146338551376467802977737909985802139192651933370766284343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							966e1d054016c6ebff25b27eb93345aa5666c8e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.morecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscatholicmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscatholicmission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001636ae45a160000040300473045022042f6edc446a6378883e28884db4f499cd9b2b1652938a194a2489852c5acd669022100a9d658c66834af02cff632631fc7f3b736e374078580de8c59f913a9bc6df295007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001636ae45a360000040300473045022100d9ace078a0a63e6af56eb780373bff993670385c36c7e6c4de95237a3ab219090220700a6f7621d094598cd6287ba2a2dcf96922aa58937cb8df69aacfcf27aea365
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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