www.ihmparishlansing.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:0f:86:4b:d6:7f:b8:a0:fd:46:67:f8:1b:e8:38:cd:2e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ihmparishlansing.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:0f:86:4b:d6:7f:b8:a0:fd:46:67:f8:1b:e8:38:cd:2e
Serial Number (int): 309677589623944894007443379717975588785454
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:1a:0b:c2:a5:81:53:1f:f1:ee:d9:1d:6c:42:59:56:a6:c1:7b:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:bd:1e:70:af:36:9f:da:e1:07:f4:79:87:39:89:3e:95:5d:2d:90
Fingerprint (sha256): 14:74:25:1a:4d:e4:38:7b:4c:52:c9:3c:ef:9f:44:00:fc:d7:b9:8d:7d:8a:ac:cc:fc:ac:e6:11:a4:96:cb:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ihmparishlansing.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ihmparishlansing.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctkyouth.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
ihmparishlansing.org
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
princeofpeaceormond.com
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
stannbartlett.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctkyouth.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.ihmparishlansing.org
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.princeofpeaceormond.com
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.stannbartlett.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org

Other certificates including the domain name ihmparishlansing.org

(limited to 100 certificates)
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org

Certificate

The complete raw certificate details for www.ihmparishlansing.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0sDEYo/BLdNy/N7aLMg
zdnnq4A1nrjFtAFFjDdFtwS4IrPFQTD0vnatG4Jg73ckNBHc405pbykHUj4Wnj0E
P7RJgaqZWlwxHvTvUx906TVuEvMVBLEXAEV3Ukacs+1fD2jBPHE/IpymXUUbgBGp
SpcqUgPUD7t74bIJSIUEa5RqjJdMY3kmE9hH8238oQfC0cnfVqt9c1fQhAUGBVZU
AGpZGMAs8898mGYtCn8t1rhUW985SS0zcTp0HUY5f+upylNcmC02bBgM62dcVd7X
HaO5sKiZyuPM3QvoHZpBP1naiEZvx1BHL9t3GFTVFe51C6loQxOmYQcbhipEb0ZC
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309677589623944894007443379717975588785454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 05:31:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 05:31:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ihmparishlansing.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21623739938313020624866291703819944447086949597915781748946061641925804781717390939804029063551294090280320953785134544779536554282954618617578737775452354530856313080930952882457464471631419111073496950906539876917040924307131020649295816418255856689019790981774163546902771199980816090909389755326331742546539687551039308368215921241919940935076022033117508851491847754971288248111075298020155770876174087649112770032041990965201128209822707681295804254423936324038994746554574251999711197433351477913399046129205280745248765252659937435626252078273257447796880523707653047649128112425240738697635227220680160723667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							101a0bc2a581531ff1eed91d6c425956a6c17b26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannbartlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannbartlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001646e4a06bf000004030048304602210091cb6c4261a19a6942189dc82809fabe20007071fd6fbc1d2d8f67e6dfc9d2a8022100c30506f8211ad8d1e85f53eeafbe7826cf0894eedbc203d2c3099901429837b2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001646e4a06d4000004030047304502201cba408cc82c7c8d7ef0fa5aee2f900aea779269605e1eec60f2a7b0b1b619b5022100cd52778810208d5c36923ef5467203a752ee7ade04a48da7c7df23e798be9c50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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