www.sscmshiner.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:55:0d:a0:db:39:b8:4b:54:88:d7:f6:40:18:13:eb:e3:ef was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sscmshiner.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:0d:a0:db:39:b8:4b:54:88:d7:f6:40:18:13:eb:e3:ef
Serial Number (int): 377391260093184070233126346141250045600751
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:47:8d:82:00:7b:9e:4c:33:71:6b:0a:13:4f:ff:b7:ce:f9:08:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:5b:03:e5:b3:5c:0b:c1:da:91:6f:13:8c:c3:e0:36:d8:cb:73:7d
Fingerprint (sha256): 14:1a:8a:ec:aa:13:9b:b0:9c:a2:9d:09:0d:ad:c8:44:c7:29:6c:25:1e:54:8d:6e:73:32:a7:e5:c1:11:ad:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sscmshiner.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sscmshiner.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blessedsacramentwv.org
borromeochurch.org
ctkph.org
holyfamilywy.org
htrccsherman.org
ihmkelso.org
jesusthedivinemercy.com
koojradio.com
maryqueenschool.org
melbournecc.org
nativitysouthamherst.com
nativitystmary.org
ologs.org
olphbc.org
parish.ctkcatholic.com
perg-tamu.com
religiousramblers.com
sacredheartchapel.com
saintrosechurch.net
school.olphbc.org
sfcabrini.us
shinercatholicschool.org
smmchurch.org
sps-tn.org
sscmshiner.org
stabcs.org
standrews-delavan.org
stannpv.org
staugustinecatholicparish.org
stchristophersi.org
stcolumbkill.org
stjameseganville.com
stjoesmhd.com
stjohnminot.com
stjosephinez.org
stjudedewitt.com
stmarymaplepark.org
stmaryslg.org
stmaryvermilion.org
stpatrickamboy.org
stpeterschoolaurora.org
stthomasamarillo.org
test.ecatholic.com
thisrockradio.com
transfiguration-tarrytown.org
txelitebasketball.com
winonanewman.org
www.blessedsacramentwv.org
www.borromeochurch.org
www.ctkph.org
www.holyfamilywy.org
www.htrccsherman.org
www.ihmkelso.org
www.jesusthedivinemercy.com
www.koojradio.com
www.maryqueenschool.org
www.melbournecc.org
www.nativitysouthamherst.com
www.nativitystmary.com
www.nativitystmary.org
www.ologs.org
www.olphbc.org
www.parish.ctkcatholic.com
www.perg-tamu.com
www.religiousramblers.com
www.sacredheartchapel.com
www.saintrosechurch.net
www.sfcabrini.us
www.shinercatholicschool.org
www.smmchurch.org
www.sps-tn.org
www.sscmshiner.org
www.stabcs.org
www.standrews-delavan.org
www.stannpv.org
www.staugustinecatholicparish.org
www.stchristophersi.org
www.stcolumbkill.org
www.stjameseganville.com
www.stjoesmhd.com
www.stjohnminot.com
www.stjosephinez.org
www.stjudedewitt.com
www.stmarymaplepark.org
www.stmaryslg.org
www.stmaryvermilion.org
www.stpatrickamboy.org
www.stpeterschoolaurora.org
www.stthomasamarillo.org
www.test.ecatholic.com
www.thisrockradio.com
www.transfiguration-tarrytown.org
www.txelitebasketball.com
www.winonanewman.org

Other certificates including the domain name sscmshiner.org

(limited to 100 certificates)
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.ststephenchurchwarwick.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org

Certificate

The complete raw certificate details for www.sscmshiner.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMB49vr6lfCYY28WAFKt
wIriSQrOFFdyVUATI/dWawUhVDiBGMzuafQ4+WwbL0sY/BB7tkZlMw6vGV5Il3Q3
xfrDw8auKgGX0JX12u6lfbWRWlGJIKVnc1XkDRnD0uRvfndWudQKbO9pWyjbCn7D
7YLTAt/4UDIZ2Un8D6KaaNGIW5DzUss6Yd7zUCXUn0Vfpl9D0RXDLCR25/oAaFhv
zVSVtHbMoBeqeET8BcDuuZQGqu/9kiNUu0F0LXuhYMBbBKd3+1jCp6RAdCB/8y9y
vtvxjCrFkZJtKvbZHdmINjNkOtFtMx2p4VIj4tmsKDb+oebbtmie0EkPvMgY17X1
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377391260093184070233126346141250045600751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-22 05:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 05:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sscmshiner.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24837619509688664890053370338314643446069199045594058181214671237717214633937757610471991932578110315939361455967382486760707315309754764088996719809935166589096935649145099131948981636730940863329168123376905680997147021309806994970494229885161003260159467251412294138985705406672139389428231189430846661201329663219528393534353141066065277888288632023825206274358440455459007411323729381109350414937434908594118663168206511545566030578297100703779162032109419817837056654595976809408047057287938923426118125586155827146217321136209410788406684554568548964125287537210700524572262175586931766870564877096804429460939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa478d82007b9e4c33716b0a134fffb7cef908d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1999 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borromeochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilywy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htrccsherman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmkelso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusthedivinemercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koojradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryqueenschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitysouthamherst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perg-tamu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religiousramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintrosechurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcabrini.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinercatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-tn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmshiner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stabcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standrews-delavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staugustinecatholicparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stchristophersi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbkill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjameseganville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoesmhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephinez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudedewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarymaplepark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryvermilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickamboy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterschoolaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisrockradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txelitebasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winonanewman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borromeochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilywy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htrccsherman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihmkelso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusthedivinemercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koojradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryqueenschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbournecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitysouthamherst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olphbc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perg-tamu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.religiousramblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintrosechurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfcabrini.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shinercatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sps-tn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmshiner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stabcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standrews-delavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinecatholicparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stchristophersi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbkill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameseganville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoesmhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephinez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudedewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarymaplepark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryvermilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickamboy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterschoolaurora.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thisrockradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.txelitebasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winonanewman.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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