www.stmaryelyria.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:38:a2:4a:e9:ea:08:8b:cf:1d:4c:b5:ad:6e:53:3d:5f was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stmaryelyria.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:38:a2:4a:e9:ea:08:8b:cf:1d:4c:b5:ad:6e:53:3d:5f
Serial Number (int): 286593032386716126527101336692057575734623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:23:b3:ea:a7:36:41:a3:b1:86:1b:a6:55:7b:23:7d:54:5f:43:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:97:f7:8a:8c:8b:61:14:ca:f8:fc:a9:5c:24:66:68:6f:bc:78:5c
Fingerprint (sha256): 1b:9c:d4:d5:1e:53:36:83:f0:0a:8b:73:d1:58:90:4a:ce:bd:52:7a:e7:3d:bb:2d:a5:25:cd:01:f0:dd:b3:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stmaryelyria.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stmaryelyria.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggielandhomeschool.com
catholic.tulane.edu
catholicdos.org
charityguildshop.org
easbothell.org
gssfrankfort.org
heargodscall.com
hfnb.org
holytrinityrcparish.org
icgrandprairie.org
insidethewalls.org
olmcorange.com
olmnh.org
parish.holyfamilyportland.org
popabq.org
sacredheartofjesusonline.org
saintlawrencemartyr.org
saintmartindetours.org
saintmarymosj.com
saintsppta.org
sanjuandiegodallas.org
school.holyfamilyportland.org
sesjchurch.com
shcstx.com
shparish.org
sjcparish.org
st-marys.pvt.k12.ia.us
stanthonyrak.org
stcolumbaonline.org
stedwardsparish.org
stfrancissherwoodschool.org
stjamesgrafton.com
stjohnbosco.com
stjohnch.org
stjosephch.org
stjosephscharlton.com
stjparish.com
stlukedanvilleoh.org
stmaryelyria.org
stmaryrush.org
stmarysamarillo.com
stmarysbismarck.org
stpatrickottumwa.com
stvincentpampa.com
tccelementary.org
www.aggielandhomeschool.com
www.catholic.tulane.edu
www.catholicdos.org
www.charityguildshop.org
www.easbothell.org
www.gssfrankfort.org
www.heargodscall.com
www.hfnb.org
www.holytrinityrcparish.org
www.icgrandprairie.org
www.insidethewalls.org
www.olmcorange.com
www.olmnh.org
www.popabq.org
www.sacredheartofjesusonline.org
www.saintlawrencemartyr.org
www.saintmartindetours.org
www.saintmarymosj.com
www.saintsppta.org
www.sanjuandiegodallas.org
www.sesjchurch.com
www.shcstx.com
www.shparish.org
www.sjcparish.org
www.st-marys.pvt.k12.ia.us
www.stanthonyrak.org
www.stcolumbaonline.org
www.stedwardsparish.org
www.stfrancissherwoodschool.org
www.stjamesgrafton.com
www.stjohnbosco.com
www.stjohnch.org
www.stjosephch.org
www.stjosephscharlton.com
www.stjparish.com
www.stlukedanvilleoh.org
www.stmaryelyria.org
www.stmaryrush.org
www.stmarysamarillo.com
www.stmarysbismarck.org
www.stpatrickottumwa.com
www.stvincentpampa.com
www.tccelementary.org

Other certificates including the domain name stmaryelyria.org

(limited to 100 certificates)
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org

Certificate

The complete raw certificate details for www.stmaryelyria.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf9nD1xDFp/WrT8EoN42
GdOxpwef4FcWjaswE2S+Mi7M3IjgS2UrzgymSbuX9SLDH1E+8QFng4EMf/Ki2meI
KcWK+Bw8RFZYLanWO5Xv5fPhvKo0BA3iGnTo4niVjOVSfC8DN4YH6sQHEm+RykDs
ncG4LLz48EbBpwoeJTfeXuXN5JSQPuufNBNS5JS+bwnECuR7xJus2o53J5TCKwLO
4aJjswVCq3qzW94uFM9lgmDIbpj9HBYfPZCCK+MJluKvA+JqNozvvoZOB/WUxQpB
kiNJCjYUtxnxwXPhyBINg4DxnNQi4re+ZYE3zYtYRU8vCh9ZXl1sT85d9CTDajp1
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286593032386716126527101336692057575734623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 05:30:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 05:30:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stmaryelyria.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23984983343847694186063519753989814282292900449106584181625061668085577124556132526714265258732193488009922900128695038946361651835061304477156157938066956168896009294691964174935140565046633710875331118255898145945359768331264672834370242678214987855657258504266438884500872639297308070035048591700097308283894946554866775948338026287109681016677269625073175347802842117474759483907499053225011759356458336856503018391330297866704789632048797265793284780984995765452128738991126644971189206029016522514158261185969118377215243015387744454989897733152815479105671870811833838895408941283671538329402934100670096766413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c123b3eaa73641a3b1861ba6557b237d545f43e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccelementary.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c22ac95a90000040300483046022100e198bf81c4cac470e7eecc40d617d90f32d2646898de4503bfb66d3304822e9b022100ce75a742b33d66ea263ae4c20848ebdaf39a619292f53d7eb712d4d0c0ffaec400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c22ac95a40000040300473045022019e823355834b72238c431b35019084a8950f74799d4a8e51371c1cd5bb84ed6022100850ab8d3372234963387be664fabc3ad8fd83314989a5d9c9d894e15506c700b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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