ourladyguadalupefw.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:b6:2f:10:85:3a:ca:dc:1d:47:8a:4c:06:2b:5a:8b:99 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ourladyguadalupefw.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:b6:2f:10:85:3a:ca:dc:1d:47:8a:4c:06:2b:5a:8b:99
Serial Number (int): 314663070903206440711794991763201401195417
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:54:73:d1:05:75:e2:31:f9:93:73:1a:fc:08:9e:c1:5f:5c:6d:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:e9:ca:93:6b:dc:85:d0:4b:33:ac:32:90:14:1d:49:c4:76:f3:c6
Fingerprint (sha256): 23:4e:18:09:1b:1f:44:cc:61:a0:96:6f:87:a6:72:0f:ba:0d:f4:24:f4:d5:fe:1f:20:ce:e2:c1:05:87:a1:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ourladyguadalupefw.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ourladyguadalupefw.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

16jda.com
angelsinavenue.org
bismarckfertilitycare.com
cfook.org
church.stfrancisxavier.com
cpswc.org
fcjcoh.net
holyfamilyaston.org
holyfamilyfranklinton.org
holyfamilytopeka.net
holynativitypayson.org
icuctn.org
lambtoncatholic.ca
lcsaints.org
lightofchristacademy.org
lumenchristiparish.org
nsucatholic.org
ourladyguadalupefw.org
ourladylebanon.com
portocharities.org
ramann.art
sacbstx.org
sacredheartnorco.org
saintanthonysnm.org
saldelatierrat.com
sbdallas.org
school.stfrancisxavier.com
smdpchurch.org
stagnesofbohemia.org
stanncass.com
stanncatholicschool.com
stannlafayette.org
staugustinehighland.org
stclarehouston.org
stedwardbowie.com
stjoachimpittsville.com
stjosephdg.org
stjosephscatholicchurch-manor.org
stjudebmt.org
stjudechalfont.org
stmartindeporreschurch.org
stpaulakron.org
stpaulparishakron.org
stpeterswaldorf.org
svdpsmg.org
www.16jda.com
www.angelsinavenue.org
www.bismarckfertilitycare.com
www.cfook.org
www.cpswc.org
www.fcjcoh.net
www.holyfamilyaston.org
www.holyfamilyfranklinton.org
www.holyfamilytopeka.net
www.holynativitypayson.org
www.icuctn.org
www.lambtoncatholic.ca
www.lcsaints.org
www.lightofchristacademy.org
www.lumenchristiparish.org
www.nsucatholic.org
www.ourladyguadalupefw.org
www.ourladylebanon.com
www.portocharities.org
www.ramann.art
www.sacbstx.org
www.sacredheartnorco.org
www.saintanthonysnm.org
www.saldelatierrat.com
www.sbdallas.org
www.smdpchurch.org
www.stagnesofbohemia.org
www.stanncass.com
www.stanncatholicschool.com
www.stannlafayette.org
www.staugustinehighland.org
www.stclarehouston.org
www.stedwardbowie.com
www.stjoachimpittsville.com
www.stjosephdg.org
www.stjosephscatholicchurch-manor.org
www.stjudebmt.org
www.stjudechalfont.org
www.stmartindeporreschurch.org
www.stpaulakron.org
www.stpaulparishakron.org
www.stpeterswaldorf.org
www.svdpsmg.org

Other certificates including the domain name ourladyguadalupefw.org

(limited to 100 certificates)
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.sacbstx.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.sacbstx.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org

Certificate

The complete raw certificate details for ourladyguadalupefw.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMxjCCC66gAwIBAgISA5y2LxCFOsrcHUeKTAYrWouZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MDQwNTM3NTFaFw0x
OTA4MDIwNTM3NTFaMCExHzAdBgNVBAMTFm91cmxhZHlndWFkYWx1cGVmdy5vcmcw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdvyyTM3eaZ6pJc1pt+oJ
ANDMGOkGZ5kEfelXmv8o1tggxZVBx2kj/Q6J5wVSnHx32EjHk7JGX4Oz/f+0oIqX
UzdOXkS5PTd8WZ01t2QPsMH4cwLOSI9WyNy2R3bUV6bY9v1rSR3yQu8AxZYEkeas
5X4B7GQHYGshNMkyUW14SFMO5gjj63Pk2yhHXNxoEbQCwlXeJw1rg1/0raOcjxrt
anLIM9mmIUyv8NLlWXYAVb8xLanfpkd6Fx7kngRGbo9YKiX30NW29DpbLhyL1qHy
Uy6Luu72iHfRlMsxCdH4dysK2U0wZmKnxvm2wrtsc7OxLlou1q6te5Q61Hulgowx
AgMBAAGjggnNMIIJyTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFD5Uc9EFdeIx+ZNz
GvwInsFfXG1dMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggeBBgNVHREEggd4MIIHdIIJMTZqZGEuY29tghJhbmdlbHNp
bmF2ZW51ZS5vcmeCGWJpc21hcmNrZmVydGlsaXR5Y2FyZS5jb22CCWNmb29rLm9y
Z4IaY2h1cmNoLnN0ZnJhbmNpc3hhdmllci5jb22CCWNwc3djLm9yZ4IKZmNqY29o
Lm5ldIITaG9seWZhbWlseWFzdG9uLm9yZ4IZaG9seWZhbWlseWZyYW5rbGludG9u
Lm9yZ4IUaG9seWZhbWlseXRvcGVrYS5uZXSCFmhvbHluYXRpdml0eXBheXNvbi5v
cmeCCmljdWN0bi5vcmeCEmxhbWJ0b25jYXRob2xpYy5jYYIMbGNzYWludHMub3Jn
ghhsaWdodG9mY2hyaXN0YWNhZGVteS5vcmeCFmx1bWVuY2hyaXN0aXBhcmlzaC5v
cmeCD25zdWNhdGhvbGljLm9yZ4IWb3VybGFkeWd1YWRhbHVwZWZ3Lm9yZ4ISb3Vy
bGFkeWxlYmFub24uY29tghJwb3J0b2NoYXJpdGllcy5vcmeCCnJhbWFubi5hcnSC
C3NhY2JzdHgub3JnghRzYWNyZWRoZWFydG5vcmNvLm9yZ4ITc2FpbnRhbnRob255
c25tLm9yZ4ISc2FsZGVsYXRpZXJyYXQuY29tggxzYmRhbGxhcy5vcmeCGnNjaG9v
bC5zdGZyYW5jaXN4YXZpZXIuY29tgg5zbWRwY2h1cmNoLm9yZ4IUc3RhZ25lc29m
Ym9oZW1pYS5vcmeCDXN0YW5uY2Fzcy5jb22CF3N0YW5uY2F0aG9saWNzY2hvb2wu
Y29tghJzdGFubmxhZmF5ZXR0ZS5vcmeCF3N0YXVndXN0aW5laGlnaGxhbmQub3Jn
ghJzdGNsYXJlaG91c3Rvbi5vcmeCEXN0ZWR3YXJkYm93aWUuY29tghdzdGpvYWNo
aW1waXR0c3ZpbGxlLmNvbYIOc3Rqb3NlcGhkZy5vcmeCIXN0am9zZXBoc2NhdGhv
bGljY2h1cmNoLW1hbm9yLm9yZ4INc3RqdWRlYm10Lm9yZ4ISc3RqdWRlY2hhbGZv
bnQub3JnghpzdG1hcnRpbmRlcG9ycmVzY2h1cmNoLm9yZ4IPc3RwYXVsYWtyb24u
b3JnghVzdHBhdWxwYXJpc2hha3Jvbi5vcmeCE3N0cGV0ZXJzd2FsZG9yZi5vcmeC
C3N2ZHBzbWcub3Jngg13d3cuMTZqZGEuY29tghZ3d3cuYW5nZWxzaW5hdmVudWUu
b3Jngh13d3cuYmlzbWFyY2tmZXJ0aWxpdHljYXJlLmNvbYINd3d3LmNmb29rLm9y
Z4INd3d3LmNwc3djLm9yZ4IOd3d3LmZjamNvaC5uZXSCF3d3dy5ob2x5ZmFtaWx5
YXN0b24ub3Jngh13d3cuaG9seWZhbWlseWZyYW5rbGludG9uLm9yZ4IYd3d3Lmhv
bHlmYW1pbHl0b3Bla2EubmV0ghp3d3cuaG9seW5hdGl2aXR5cGF5c29uLm9yZ4IO
d3d3LmljdWN0bi5vcmeCFnd3dy5sYW1idG9uY2F0aG9saWMuY2GCEHd3dy5sY3Nh
aW50cy5vcmeCHHd3dy5saWdodG9mY2hyaXN0YWNhZGVteS5vcmeCGnd3dy5sdW1l
bmNocmlzdGlwYXJpc2gub3JnghN3d3cubnN1Y2F0aG9saWMub3Jnghp3d3cub3Vy
bGFkeWd1YWRhbHVwZWZ3Lm9yZ4IWd3d3Lm91cmxhZHlsZWJhbm9uLmNvbYIWd3d3
LnBvcnRvY2hhcml0aWVzLm9yZ4IOd3d3LnJhbWFubi5hcnSCD3d3dy5zYWNic3R4
Lm9yZ4IYd3d3LnNhY3JlZGhlYXJ0bm9yY28ub3Jnghd3d3cuc2FpbnRhbnRob255
c25tLm9yZ4IWd3d3LnNhbGRlbGF0aWVycmF0LmNvbYIQd3d3LnNiZGFsbGFzLm9y
Z4ISd3d3LnNtZHBjaHVyY2gub3Jnghh3d3cuc3RhZ25lc29mYm9oZW1pYS5vcmeC
EXd3dy5zdGFubmNhc3MuY29tght3d3cuc3Rhbm5jYXRob2xpY3NjaG9vbC5jb22C
Fnd3dy5zdGFubmxhZmF5ZXR0ZS5vcmeCG3d3dy5zdGF1Z3VzdGluZWhpZ2hsYW5k
Lm9yZ4IWd3d3LnN0Y2xhcmVob3VzdG9uLm9yZ4IVd3d3LnN0ZWR3YXJkYm93aWUu
Y29tght3d3cuc3Rqb2FjaGltcGl0dHN2aWxsZS5jb22CEnd3dy5zdGpvc2VwaGRn
Lm9yZ4Ild3d3LnN0am9zZXBoc2NhdGhvbGljY2h1cmNoLW1hbm9yLm9yZ4IRd3d3
LnN0anVkZWJtdC5vcmeCFnd3dy5zdGp1ZGVjaGFsZm9udC5vcmeCHnd3dy5zdG1h
cnRpbmRlcG9ycmVzY2h1cmNoLm9yZ4ITd3d3LnN0cGF1bGFrcm9uLm9yZ4IZd3d3
LnN0cGF1bHBhcmlzaGFrcm9uLm9yZ4IXd3d3LnN0cGV0ZXJzd2FsZG9yZi5vcmeC
D3d3dy5zdmRwc21nLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAI
xjc1eeYQe8xWAAABaoGQL8QAAAQDAEcwRQIgbC1/4X5aTAddggxa1NDfYADMDINK
HGWmlhPnuhNMBaICIQCkeUIidkExzGSnbpJWoHaYG+ZE4IGmRei5Rmeig4nr6QB2
ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaoGQL98AAAQDAEcw
RQIgKeHQxbgbIWY7HfJrD8W1GzbKBapTp1bCbAvKCZDOogACIQC1iIXcxSPvUFk3
vET/K3mkuM9BpwnhNdYjJ32uR3oSaDANBgkqhkiG9w0BAQsFAAOCAQEAO6/Hrw/g
8QYGlIqH4Uls0aVPvT5tAwIhHkI/AM+EPOXaAg9Hi7emnnHB3yjIYtit5IAANzKC
2I7TNyLeIFc1GdBTHVuhP1pbht5YyRUq4d5sRcPY6zGdHWRbiVwwmFPiqOv8zgHB
DX8XvP+8FkZLus4FyUb2z5D/AfO6NLQ+XZFJ2+34AEnVNuS+YSbiH4Mb9e9XYiDe
X4OpZwzO28fgqh2kdbbtWGYV164nYFNDECBEpQ8/azOMVMGhjOfiLmsv36BzAP89
KatJ8xgXAcS/rGWW7pvRkGD1HvVsw+JzKiqZyw1qr3Cmo9I783/gjYpOx5HZ7SxC
RPfRCiJh0+T++w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXb8skzN3mmeqSXNabfq
CQDQzBjpBmeZBH3pV5r/KNbYIMWVQcdpI/0OiecFUpx8d9hIx5OyRl+Ds/3/tKCK
l1M3Tl5EuT03fFmdNbdkD7DB+HMCzkiPVsjctkd21Fem2Pb9a0kd8kLvAMWWBJHm
rOV+AexkB2BrITTJMlFteEhTDuYI4+tz5NsoR1zcaBG0AsJV3icNa4Nf9K2jnI8a
7WpyyDPZpiFMr/DS5Vl2AFW/MS2p36ZHehce5J4ERm6PWCol99DVtvQ6Wy4ci9ah
8lMui7ru9oh30ZTLMQnR+HcrCtlNMGZip8b5tsK7bHOzsS5aLtaurXuUOtR7pYKM
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314663070903206440711794991763201401195417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-04 05:37:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 05:37:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ourladyguadalupefw.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25937527241740154818440408092008886264984189263102618172698196158870651043302931138570070855871750230274099886231255783501298828939338286015182023242548046465887048972302515475661445337300577881629385085903468449470541550310158513988564650395134450746623019286990800776885374089386781696333386774523282658247300325212142779371614210827832313817544211128642346044324585684033438901471631023187492962853059414612477462886995603875619591366620262161670486955284344876996753456744586933367315052944120357097218283927445077053676713387123609355353168267282507529350418882008447867026825800359116963734079921590757144824881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e5473d10575e231f993731afc089ec15f5c6d5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyguadalupefw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdpsmg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyguadalupefw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdpsmg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a81902fc4000004030047304502206c2d7fe17e5a4c075d820c5ad4d0df6000cc0c834a1c65a69613e7ba134c05a2022100a4794222764131cc64a76e9256a076981be644e081a645e8b94667a28389ebe9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a81902fdf0000040300473045022029e1d0c5b81b21663b1df26b0fc5b51b36ca05aa53a756c26c0bca0990cea200022100b58885dcc523ef505937bc44ff2b79a4b8cf41a709e135d623277dae477a1268
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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