www.cwiaholyspirit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:2b:6b:39:bc:42:14:c3:93:d9:a7:08:7f:ab:d1:14:59 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cwiaholyspirit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:2b:6b:39:bc:42:14:c3:93:d9:a7:08:7f:ab:d1:14:59
Serial Number (int): 336937256802324386511412307575836624622681
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:21:58:18:fb:95:b5:be:50:07:bc:7c:29:cd:b9:1b:2c:68:3f:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:7b:65:e7:b5:35:0a:68:f7:9b:ae:09:26:36:36:d1:84:66:7a:4f
Fingerprint (sha256): 1f:8f:90:61:ec:e3:18:f1:c3:c4:a8:80:11:04:34:3d:2c:bf:f2:e6:22:a3:58:60:2f:94:01:55:a2:31:74:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cwiaholyspirit.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwiaholyspirit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
stannbartlett.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.stannbartlett.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org

Other certificates including the domain name cwiaholyspirit.org

(limited to 100 certificates)
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org

Certificate

The complete raw certificate details for www.cwiaholyspirit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Wc4n3BkkljhOBaQBr0
1Qfr1es+fv83FJIZ8DvE6pMppawF8+r+8CpRZKIABvl5FibJm/7lK6j5/JdccUwd
YtYUUj6eXyG+cVWmjZd4gW4l07snUJINkZyBfgpkxYd3DT7ZFnYIcVa2bZ3puslN
EcHCoZRi6RwtH1gQcI1By4ivkMU/BkBf0IDdkbd01DFN4E6UsCCv1cHCCVhZoLZb
L6z7qQU4s3+NFIA7NulTd6hKgyAXVkWI63HxS2wLGTQr9BBVst4Y2vLttMF/augX
cCJ4ABmBtf70NH/D7lQrljJIJVh48ab82RtTD1mHPU095NNw33Cu3MQQ4/t79Yk8
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336937256802324386511412307575836624622681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 05:31:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 05:31:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwiaholyspirit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26702169290435562248605384164717074635342965216251310301897694358541027768128889579906731861337106255417938288299056950975594887944585076324942408202557484768642554063018040105676852008138053775104746042521124298396326839157799152408003927158603623906707104547797926938506525919149263074842156163363247498049213617744844361072454910098773397089008430457494882403605594433728077478628725496643359263032867161761303936824709379596550673463596811539402764807410140891507059904477648714381371182514986130081805583096575738749423972238422481252485558057995601057728390915978445968033924307238955952415638314016205338918043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35215818fb95b5be5007bc7c29cdb91b2c683f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannbartlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannbartlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167cf75f111000004030046304402207ec2de3b4190f007931da4631ac59fb0d788563188b1cb6f0cedd5a43ed257cd02203c6409732e78631c102ab34df0b7fdc321d6b0c2890f5138f187f8d11c10369e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167cf75f11c00000403004730450220287bcd39d7ef993f098e942965d0a835d4e27c952baf9737577ca6230258c2c1022100adfdb883cf4c328e145b71306a85df06146328726cc5e9673a95cdb6060f01b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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