www.holyfamilylindale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:64:6a:db:3d:b8:36:a1:6e:7c:64:3d:08:aa:52:a6:a3:98 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilylindale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:6a:db:3d:b8:36:a1:6e:7c:64:3d:08:aa:52:a6:a3:98
Serial Number (int): 382619416951521928217330287367101920748440
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:42:3c:5e:a0:15:53:66:94:af:38:1c:48:2c:5a:44:0a:c3:00:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:7e:df:26:98:2e:41:b3:d2:a1:76:d6:55:68:5f:39:88:cb:43:3a
Fingerprint (sha256): 1c:53:89:07:cf:70:1e:fe:26:83:b9:f4:88:01:e7:a6:42:2b:6b:8d:19:ca:9a:5a:e1:a3:a6:c2:94:04:0f:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holyfamilylindale.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilylindale.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinaszanesville.org
athenscatholic.org
cathedralofsaintpaul.com
catholic-community.org
ccm847.org
christthekingparish.org
churchofholyspiritwebster.org
corpuschristimaine.org
fortbelvoircatholiccommunity.com
goodshepherdparish.us
holyfamilycluster.org
holyfamilylindale.org
hryaya.org
icaugusta.org
icceaston.org
immaculateconceptionsacramento.org
jp2denton.org
mostholytrinitychurch.org
olpchurch.com
olvcathedral.org
piquacatholic.org
piquaparishes.org
saintpaulofthecross.org
sanjuanshrinesa.com
school.st-ignatius.org
seaschurch.com
sfnortonshores.com
sjcstx.org
sjwhf.org
sorrowspetawawa.com
ssjohnpaul.org
st-teresa.com
stclarecatholic.org
stgregorythegreatchurch.org
sthelena.org
stjamesgrafton.com
stjoepittsfield.com
stjoseph-elkgrove.net
stjta.org
stmarychurch.net
stmarydekalb.org
stmaryslaporte.com
stpeterrockets.org
stscholastica.org
sttheresaij.org
stthomaspilotpoint.org
visitationhome.org
www.aquinaszanesville.org
www.athenscatholic.org
www.cathedralofsaintpaul.com
www.catholic-community.org
www.ccm847.org
www.christthekingparish.org
www.churchofholyspiritwebster.org
www.corpuschristimaine.org
www.fortbelvoircatholiccommunity.com
www.goodshepherdparish.us
www.holyfamilycluster.org
www.holyfamilylindale.org
www.hryaya.org
www.icaugusta.org
www.icceaston.org
www.immaculateconceptionsacramento.org
www.jp2denton.org
www.mostholytrinitychurch.org
www.olpchurch.com
www.olvcathedral.org
www.piquacatholic.org
www.piquaparishes.org
www.saintpaulofthecross.org
www.sanjuanshrinesa.com
www.seaschurch.com
www.sfnortonshores.com
www.sjcstx.org
www.sjwhf.org
www.sorrowspetawawa.com
www.ssjohnpaul.org
www.st-teresa.com
www.stclarecatholic.org
www.stgregorythegreatchurch.org
www.sthelena.org
www.stjamesgrafton.com
www.stjameswashington.org
www.stjoepittsfield.com
www.stjoseph-elkgrove.net
www.stjta.org
www.stmarychurch.net
www.stmarydekalb.org
www.stmaryslaporte.com
www.stpeterrockets.org
www.stscholastica.org
www.sttheresaij.org
www.stthomaspilotpoint.org
www.visitationhome.org

Other certificates including the domain name holyfamilylindale.org

(limited to 100 certificates)
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org

Certificate

The complete raw certificate details for www.holyfamilylindale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzjer3eN/T9rKeTTiv7s
NbqygRaLzNhOnkoM5ILFZbAv9WfYnzjbeO1wvw57VdEanhZDoTkGcKMyNsBl/Gci
sJsVAi3RsccW4koTWpb66xwDfStCAE4JRC4Se4ZxODwCyEfclzGnZfKk79/W35bU
6M50x7HKQLC8mXeZS5YOPQekmPFOdREXE+ndJYOMB1lI2VNZfIvZ/q7cZU+j8d/x
VY0AmA9RWWHSWh8RAXDDbFeMWwXIjpQ/h6pSLa2ya8Y7E+J7+FRDrfQz68GMrWEW
D1dhDmUCyoOVwZDrMMgXjQIog4dTybKuqmCJeQtAJ2I3drQAmmczYmJKFW+VzTpq
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382619416951521928217330287367101920748440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 05:13:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 05:13:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilylindale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25149466263833183311679745649943095055228554050854625630083567182576635200489775357465881205981962132864031954048391416398255089112015281025938461069213080376418903784179816332672964788430885323404644950817881468226406860459437547924201998428152954152188016194312378774762659629350429157631855043164640633127178941251990100472826358649371745229861063556532298726482788294677981690646977874401093155033366020674469229163712093383620763514606582872159835676661759236836233696387392764106677372100184479597735547270805816101795829239801672228586794986419838839853435638763390485264704866716973659993744943718254188849691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20423c5ea015536694af381c482c5a440ac300e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.st-ignatius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationhome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationhome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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