www.annunciation-ottawa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:1a:24:4d:1e:2c:1b:aa:d0:48:cc:91:b3:e2:12:21:85 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.annunciation-ottawa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:1a:24:4d:1e:2c:1b:aa:d0:48:cc:91:b3:e2:12:21:85
Serial Number (int): 292337301599799490326209205998119340351877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:11:4e:4b:17:51:71:ac:cb:fa:73:42:97:f5:dc:ab:6a:c0:b3:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:21:05:f6:d0:30:6e:b4:84:e1:1e:35:45:c2:35:20:04:6b:ed:06
Fingerprint (sha256): 1b:4c:17:c9:2e:cc:a0:1f:4c:a7:0f:d7:60:34:ba:ae:29:ef:17:17:1a:ac:39:d5:3e:90:ff:d8:c7:7f:55:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.annunciation-ottawa.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.annunciation-ottawa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewcc.org
annunciation-ottawa.org
annunciationfrankfort.org
assumptionspokane.org
catholicottawa.ca
catholiqueottawa.ca
divinemercyschuyler.com
hlitanzania.org
holynamechurch.org
holyrosaryfrenstat.com
holyspiritrochester.org
hoxieseguinparishes.org
kofc14700.org
nativitymen.org
npcatholic.org
olacuba.org
olgchurch.net
ologflint.org
ourladyofmtcarmelfairfieldca.org
paloaltocatholic.net
preciousbloodssm.com
qofa.org
saintagnesparish.org
saintleorcc.com
saintmichaelschurch.net
slywaco.org
solthaitimission.org
spsh.ca
sspbandj.org
st-patrick-parish.com
sta-sj.ca
stagnescatholicparish.com
stanthonyloyal.org
stbedechurchhay.org
stcharlesonline.org
stedschurch.org
stjeromeclute.org
stjohnalvin.org
stjohnchrysostom.com
stjosephok.com
stjsa.org
stm-ou.org
stmarylanesville.org
stmaryscaldwell.com
stmarywaverly.org
stmax.org
viamariaconsulting.com
www.andrewcc.org
www.annunciation-ottawa.org
www.annunciationfrankfort.org
www.assumptionspokane.org
www.catholicottawa.ca
www.catholiqueottawa.ca
www.divinemercyschuyler.com
www.hlitanzania.org
www.holynamechurch.org
www.holyrosaryfrenstat.com
www.holyspiritrochester.org
www.hoxieseguinparishes.org
www.kofc14700.org
www.nativitymen.org
www.npcatholic.org
www.olacuba.org
www.olgchurch.net
www.ologflint.org
www.ourladyofmtcarmelfairfieldca.org
www.paloaltocatholic.net
www.preciousbloodssm.com
www.qofa.org
www.saintagnesparish.org
www.saintleorcc.com
www.saintmichaelschurch.net
www.slywaco.org
www.solthaitimission.org
www.spsh.ca
www.sspbandj.org
www.st-patrick-parish.com
www.sta-sj.ca
www.stagnescatholicparish.com
www.stanthonyloyal.org
www.stbedechurchhay.org
www.stcharlesonline.org
www.stedschurch.org
www.stjeromeclute.org
www.stjohnalvin.org
www.stjohnchrysostom.com
www.stjosephok.com
www.stjsa.org
www.stm-ou.org
www.stmarylanesville.org
www.stmaryscaldwell.com
www.stmarywaverly.org
www.stmax.org
www.viamariaconsulting.com

Other certificates including the domain name annunciation-ottawa.org

(limited to 100 certificates)
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net

Certificate

The complete raw certificate details for www.annunciation-ottawa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINGjCCDAKgAwIBAgISA1saJE0eLBuq0EjMkbPiEiGFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjEwNTQwMDZaFw0x
OTAzMjEwNTQwMDZaMCYxJDAiBgNVBAMTG3d3dy5hbm51bmNpYXRpb24tb3R0YXdh
Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9DMtLlD0Z9P4am
t21Fm598VkYRFQg5brNW1gUCE8y+0Wn+h+Xw2yeL9V+ipW1Dy3+TqB+USvxGG/Q7
IZ0y/Z7YvmlyETlndkLMtx7mJOzc8nugSbbtvS1oLNG2ShNkr3DL06cD7ai7n8Up
c/GMOOzWa17TAwQibGldFFC0uv+iQ6QGbyifHmOe4F7gW1QgERfZvbdEvCq5wPt/
uwtIBrA7hj9v6VdCv5fXJ70+Lvo90/xtznMqD9QDj3WpNuFc1Waeu+wcnKD2cfK3
92m/QcJVixC+r2dY+asGTU8QlDRx5W6n6vsM9FpGMTf9QUK7tVW7dsk53n14iXWn
NaLar9cCAwEAAaOCChwwggoYMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU6xFOSxdR
cazL+nNCl/Xcq2rAsxMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCB9EGA1UdEQSCB8gwggfEggxhbmRyZXdjYy5vcmeC
F2FubnVuY2lhdGlvbi1vdHRhd2Eub3Jnghlhbm51bmNpYXRpb25mcmFua2ZvcnQu
b3JnghVhc3N1bXB0aW9uc3Bva2FuZS5vcmeCEWNhdGhvbGljb3R0YXdhLmNhghNj
YXRob2xpcXVlb3R0YXdhLmNhghdkaXZpbmVtZXJjeXNjaHV5bGVyLmNvbYIPaGxp
dGFuemFuaWEub3JnghJob2x5bmFtZWNodXJjaC5vcmeCFmhvbHlyb3NhcnlmcmVu
c3RhdC5jb22CF2hvbHlzcGlyaXRyb2NoZXN0ZXIub3Jnghdob3hpZXNlZ3VpbnBh
cmlzaGVzLm9yZ4INa29mYzE0NzAwLm9yZ4IPbmF0aXZpdHltZW4ub3Jngg5ucGNh
dGhvbGljLm9yZ4ILb2xhY3ViYS5vcmeCDW9sZ2NodXJjaC5uZXSCDW9sb2dmbGlu
dC5vcmeCIG91cmxhZHlvZm10Y2FybWVsZmFpcmZpZWxkY2Eub3JnghRwYWxvYWx0
b2NhdGhvbGljLm5ldIIUcHJlY2lvdXNibG9vZHNzbS5jb22CCHFvZmEub3JnghRz
YWludGFnbmVzcGFyaXNoLm9yZ4IPc2FpbnRsZW9yY2MuY29tghdzYWludG1pY2hh
ZWxzY2h1cmNoLm5ldIILc2x5d2Fjby5vcmeCFHNvbHRoYWl0aW1pc3Npb24ub3Jn
ggdzcHNoLmNhggxzc3BiYW5kai5vcmeCFXN0LXBhdHJpY2stcGFyaXNoLmNvbYIJ
c3RhLXNqLmNhghlzdGFnbmVzY2F0aG9saWNwYXJpc2guY29tghJzdGFudGhvbnls
b3lhbC5vcmeCE3N0YmVkZWNodXJjaGhheS5vcmeCE3N0Y2hhcmxlc29ubGluZS5v
cmeCD3N0ZWRzY2h1cmNoLm9yZ4IRc3RqZXJvbWVjbHV0ZS5vcmeCD3N0am9obmFs
dmluLm9yZ4IUc3Rqb2huY2hyeXNvc3RvbS5jb22CDnN0am9zZXBob2suY29tgglz
dGpzYS5vcmeCCnN0bS1vdS5vcmeCFHN0bWFyeWxhbmVzdmlsbGUub3JnghNzdG1h
cnlzY2FsZHdlbGwuY29tghFzdG1hcnl3YXZlcmx5Lm9yZ4IJc3RtYXgub3JnghZ2
aWFtYXJpYWNvbnN1bHRpbmcuY29tghB3d3cuYW5kcmV3Y2Mub3Jnght3d3cuYW5u
dW5jaWF0aW9uLW90dGF3YS5vcmeCHXd3dy5hbm51bmNpYXRpb25mcmFua2ZvcnQu
b3Jnghl3d3cuYXNzdW1wdGlvbnNwb2thbmUub3JnghV3d3cuY2F0aG9saWNvdHRh
d2EuY2GCF3d3dy5jYXRob2xpcXVlb3R0YXdhLmNhght3d3cuZGl2aW5lbWVyY3lz
Y2h1eWxlci5jb22CE3d3dy5obGl0YW56YW5pYS5vcmeCFnd3dy5ob2x5bmFtZWNo
dXJjaC5vcmeCGnd3dy5ob2x5cm9zYXJ5ZnJlbnN0YXQuY29tght3d3cuaG9seXNw
aXJpdHJvY2hlc3Rlci5vcmeCG3d3dy5ob3hpZXNlZ3VpbnBhcmlzaGVzLm9yZ4IR
d3d3LmtvZmMxNDcwMC5vcmeCE3d3dy5uYXRpdml0eW1lbi5vcmeCEnd3dy5ucGNh
dGhvbGljLm9yZ4IPd3d3Lm9sYWN1YmEub3JnghF3d3cub2xnY2h1cmNoLm5ldIIR
d3d3Lm9sb2dmbGludC5vcmeCJHd3dy5vdXJsYWR5b2ZtdGNhcm1lbGZhaXJmaWVs
ZGNhLm9yZ4IYd3d3LnBhbG9hbHRvY2F0aG9saWMubmV0ghh3d3cucHJlY2lvdXNi
bG9vZHNzbS5jb22CDHd3dy5xb2ZhLm9yZ4IYd3d3LnNhaW50YWduZXNwYXJpc2gu
b3JnghN3d3cuc2FpbnRsZW9yY2MuY29tght3d3cuc2FpbnRtaWNoYWVsc2NodXJj
aC5uZXSCD3d3dy5zbHl3YWNvLm9yZ4IYd3d3LnNvbHRoYWl0aW1pc3Npb24ub3Jn
ggt3d3cuc3BzaC5jYYIQd3d3LnNzcGJhbmRqLm9yZ4IZd3d3LnN0LXBhdHJpY2st
cGFyaXNoLmNvbYINd3d3LnN0YS1zai5jYYIdd3d3LnN0YWduZXNjYXRob2xpY3Bh
cmlzaC5jb22CFnd3dy5zdGFudGhvbnlsb3lhbC5vcmeCF3d3dy5zdGJlZGVjaHVy
Y2hoYXkub3Jnghd3d3cuc3RjaGFybGVzb25saW5lLm9yZ4ITd3d3LnN0ZWRzY2h1
cmNoLm9yZ4IVd3d3LnN0amVyb21lY2x1dGUub3JnghN3d3cuc3Rqb2huYWx2aW4u
b3Jnghh3d3cuc3Rqb2huY2hyeXNvc3RvbS5jb22CEnd3dy5zdGpvc2VwaG9rLmNv
bYINd3d3LnN0anNhLm9yZ4IOd3d3LnN0bS1vdS5vcmeCGHd3dy5zdG1hcnlsYW5l
c3ZpbGxlLm9yZ4IXd3d3LnN0bWFyeXNjYWxkd2VsbC5jb22CFXd3dy5zdG1hcnl3
YXZlcmx5Lm9yZ4INd3d3LnN0bWF4Lm9yZ4Iad3d3LnZpYW1hcmlhY29uc3VsdGlu
Zy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA
AWfPfhrGAAAEAwBGMEQCIEjZIXae7J2oV4VVi0DlqN4rdsSYVdcy+t3B8mnoGsLB
AiAOo+TCDNzoUNT+OM3aFWa49wTiCghueAyrMCuiypa9awB2ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZ89+GNwAAAQDAEcwRQIhAPTrhs2w74Rj
vCMvlpDRu3uFCO15BDR3vaLNt0kHJbnzAiArTyQIYvMqO+vbo89gikj9FxQOfS7H
IYUSYYqc4uJqjTANBgkqhkiG9w0BAQsFAAOCAQEAQwYNqr4s7soPNOqvyhLkX5Hy
wRdUnNnXJDYyl44s3nRS8Rb7JY7my9MhJaryysR1VnlUjGudislpChM14c4BPhFk
Ijivl83ChOXAjgEtA586a9g0NWWCAAJSdcCCInwDZUPwnZwtXby7O3XbpzagQON3
fMojv3MouAikHVunNuUYsUpwTgL3Q7j4HdjABTh5G9Mlv6jWGtlRicp+//gV7NMA
iPHRxmHtrwAk7JMw7GaCCeAzgfSXL48qxuyigO9YxVIXZ35zHfTgwm1SUVJh2u1a
I0yNebc1OFKG7ASDJZ9sa8V6WS8ut7yr56cH/qiOIaHAsLxJj8I0KT89rdgDXg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0My0uUPRn0/hqa3bUWb
n3xWRhEVCDlus1bWBQITzL7Raf6H5fDbJ4v1X6KlbUPLf5OoH5RK/EYb9DshnTL9
nti+aXIROWd2Qsy3HuYk7Nzye6BJtu29LWgs0bZKE2SvcMvTpwPtqLufxSlz8Yw4
7NZrXtMDBCJsaV0UULS6/6JDpAZvKJ8eY57gXuBbVCARF9m9t0S8KrnA+3+7C0gG
sDuGP2/pV0K/l9cnvT4u+j3T/G3OcyoP1AOPdak24VzVZp677BycoPZx8rf3ab9B
wlWLEL6vZ1j5qwZNTxCUNHHlbqfq+wz0WkYxN/1BQru1Vbt2yTnefXiJdac1otqv
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292337301599799490326209205998119340351877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 05:40:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 05:40:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.annunciation-ottawa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24144653078932700093056631487912729434178775259625449574045437223361330387973617671824966419178250401748031788280765242879887038251189145181273572604071349070374032046469502331796390452141115489138087308361085603271777335605970223849043733001299944691304198940193464733515358173820318277674052652798961996041272922480967351738349338459549705364701910340167538083796531620977909238719098424489975465012867196294517770151189594522518736439760458639748563738476621455695808893783303666298714006384635293366214187759458949490759384614587468152733630147421419960525489532122571131019886816094086120979263056084255880425431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb114e4b175171accbfa734297f5dcab6ac0b313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1992 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viamariaconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viamariaconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167cf7e1ac60000040300463044022048d921769eec9da85785558b40e5a8de2b76c49855d732faddc1f269e81ac2c102200ea3e4c20cdce850d4fe38cdda1566b8f704e20a086e780cab302ba2ca96bd6b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167cf7e18dc0000040300473045022100f4eb86cdb0ef8463bc232f9690d1bb7b8508ed79043477bda2cdb7490725b9f302202b4f240862f32a3bebdba3cf608a48fd17140e7d2ec7218512618a9ce2e26a8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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