www.transfiguration-tarrytown.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:06:ef:9c:bd:00:c0:9a:35:a9:a6:99:d4:36:e6:ce:06 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.transfiguration-tarrytown.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:06:ef:9c:bd:00:c0:9a:35:a9:a6:99:d4:36:e6:ce:06
Serial Number (int): 271894830675783985353125205343926963588614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:04:94:69:f8:f6:f7:13:c9:25:62:66:ee:43:54:f4:0c:7e:04:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:3d:52:c1:a5:48:07:62:a4:6f:a6:b2:e2:64:e5:47:60:dc:f4:3b
Fingerprint (sha256): 1f:bf:01:49:2b:95:03:0c:ba:f4:30:e4:09:ed:23:a5:eb:1c:84:2c:65:bc:4c:7b:2e:e8:e9:00:11:b5:b1:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.transfiguration-tarrytown.org

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.transfiguration-tarrytown.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsvillage.com
catholicfoundationlubbock.org
catholicmavs.org
christthekingschool.net
corpuschristi-detroit.org
ctkcathedral.org
friendsofthecathedral.org
goliadcatholic.org
hfwharton.org
holyfamily-vanalstyne.org
holyfamilytym.com
holyfamilyvb.org
iccorsicana.org
johnmichaeltalbot.com
miyouth.org
nativitystmary.com
nativitystmary.org
newarkoym.com
olgcchurch.org
ourladyrockwall.org
parish.ctkcatholic.com
pothe.org
sacredhearthidalgo.org
sacredheartsusanville.org
sacredheartwf.org
saintlawrencebasilica.org
sbscrusaders.com
sscmchurch.org
st-mm.com
stcatherine-austin.org
stcharlesabq.org
stgabriel.org
sthelenslangside.org.uk
stjeromehou.org
stjoachim.org
stjohn-mcalester.org
stjosephbcs.org
stmargaret-homer.org
stmarysnorton.com
stmarystaylor.org
stmarystpatrick.net
stmichaelmaine.org
stpatrickdallas.org
stpiusxsa.org
stromualdschool.org
transfiguration-tarrytown.org
www.allsaintsvillage.com
www.catholicfoundationlubbock.org
www.catholicmavs.org
www.christthekingschool.net
www.corpuschristi-detroit.org
www.ctkcathedral.org
www.friendsofthecathedral.org
www.goliadcatholic.org
www.hfwharton.org
www.holyfamily-vanalstyne.org
www.holyfamilytym.com
www.holyfamilyvb.org
www.iccorsicana.org
www.johnmichaeltalbot.com
www.miyouth.org
www.nativitystmary.com
www.nativitystmary.org
www.newarkoym.com
www.olgcchurch.org
www.olqh.org
www.ourladyrockwall.org
www.parish.ctkcatholic.com
www.pothe.org
www.sacredhearthidalgo.org
www.sacredheartsusanville.org
www.sacredheartwf.org
www.saintlawrencebasilica.org
www.sbscrusaders.com
www.sscmchurch.org
www.st-mm.com
www.stcatherine-austin.org
www.stcharlesabq.org
www.stgabriel.org
www.sthelenslangside.org.uk
www.stjeromehou.org
www.stjoachim.org
www.stjohn-mcalester.org
www.stjosephbcs.org
www.stmargaret-homer.org
www.stmarysnorton.com
www.stmarystaylor.org
www.stmarystpatrick.net
www.stmichaelmaine.org
www.stpatrickdallas.org
www.stpiusxsa.org
www.stromualdschool.org
www.transfiguration-tarrytown.org

Other certificates including the domain name transfiguration-tarrytown.org

(limited to 100 certificates)
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sscmshiner.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org

Certificate

The complete raw certificate details for www.transfiguration-tarrytown.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+uzCgVP/xZQ2hsG7NLf
RJQ4PpjtzHNR9mAO+cqgVI4TsYQ+HUJOVzyV4V6xwogItjy2TB8Wj4GREPPh8HYs
Bd9GceVtwnK/aQFTYYhQmQczo4ed+T9XeBPwBMXPnG1LgiTqwbXK+RcSB6GRUfXN
nwIUxAHpu/IKXI7MFUzvMvSUVZaSrm2Z87e/u35yuqnZYXckBOxHStjDBmer7wtq
U9GdXc4w1/YkishlNaRtC8RyVKcaKqjyMsKm3+fyA1Pn9KvT2IEzrQekfTrgmrP2
DDqc6CsHfo4HUgRUq6yGchliRDdsQqtvVxyW+WYq9oKn1tiYF1eWll4iZHXmHc9+
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271894830675783985353125205343926963588614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 01:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 01:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.transfiguration-tarrytown.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21198024621360048305012076128507538211471348041288627240567599157975192319240734610327396223021848535385184336542760398253850204248889396247564340928228797080706880514631663437623198130274299421248445058914786446123833651496855248422049532143981582031825609693783077944353776875889596652850509188488846451132404258348998576927857283550327583245315905075959297142101961925366871395580748382281209995309088063645679230403212960055685688413865173655320520124469090925465111782143694454174176676559498621928716924619542920607949033404693903093007975963172655675623689071069759572634315147615164817016646332088377190350571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e049469f8f6f713c9256266ee4354f40c7e0499
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2064 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmavs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliadcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iccorsicana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newarkoym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyrockwall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pothe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredhearthidalgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlawrencebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherine-austin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromehou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohn-mcalester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephbcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystpatrick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicmavs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goliadcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iccorsicana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitystmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newarkoym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyrockwall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ctkcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pothe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredhearthidalgo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartwf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlawrencebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherine-austin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromehou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohn-mcalester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephbcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaylor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystpatrick.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transfiguration-tarrytown.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cff4ca6550000040300473045022100f816d896a29a30378ed7e3f6cd517bdef4dedf32312f4804b53427a2d9e533d902201d1185a4a694f8289b3cf5465633665012f5d87236cf4911cc4c73b327b8a47900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cff4ca6880000040300483046022100b003b061a057c94475b15f32b557989f4c50d22902b8e4aa3145d307d843b8aa022100b50b05bcc85936a410ab2bb7eaee9ab286ea4485a7768aa01db5178b7ecbe65b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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