holycrossaustin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:30:ad:0d:2a:e6:cb:59:b3:51:08:8f:bd:50:ec:48:3f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holycrossaustin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:30:ad:0d:2a:e6:cb:59:b3:51:08:8f:bd:50:ec:48:3f
Serial Number (int): 299513184368650385395718305120039304185919
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:7d:39:b6:19:21:e3:8a:5d:ae:38:ec:f9:50:e0:3b:62:c0:ba:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:fa:ca:17:21:c1:28:b8:5c:e1:53:ed:30:51:8d:e6:72:c8:fc:1a
Fingerprint (sha256): 23:dc:46:04:f3:00:2c:25:a5:4a:07:9f:96:82:01:60:5f:f5:4c:19:9e:39:2b:3d:02:f1:37:1e:05:76:5b:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holycrossaustin.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holycrossaustin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsamarillo.org
asagr.org
avosa.org
catholicusf.org
ciscoholyrosary.com
cmvic.net
ctkmandan.com
duluthcathmed.org
epiphanystl.org
holycrossaustin.org
ihrc.net
jesusloveshallreign.net
kjtnet.org
mayjesuschristbepraised.com
mercycenter.com
missionsanfranciscodelaespada.org
moorestownknights.org
mountaineercatholic.com
mountcarmelsaipan.com
mystpatricks.com
olgtemple.org
ourladyofmercyhillsboro.org
ourladyoftheplains.org
queenofangelschurch.org
sacredheartbushwood.org
saintandrewwright.org
saintantoninus.org
saintbernardbelfield.com
school.morecommunity.org
st-matthias.net
stadalbertschool.net
stambroselatham.com
stbasilvallejo.org
stbrendans.net
steustachiusparish.com
stfrancis-church.org
stjulianaccf.org
stlawrencementor.org
stmatthewhou.org
stmvictoria.org
stpeterlindsay.org
strichards.com
stritaparish.net
sttitus.org
stwilliams.org
swsaints.org
thebasilica.org
uscatholicmission.org
www.actsamarillo.org
www.asagr.org
www.avosa.org
www.catholicusf.org
www.ciscoholyrosary.com
www.cmvic.net
www.ctkmandan.com
www.duluthcathmed.org
www.epiphanystl.org
www.ihrc.net
www.jesusloveshallreign.net
www.kjtnet.org
www.mayjesuschristbepraised.com
www.mercycenter.com
www.missionsanfranciscodelaespada.org
www.moorestownknights.org
www.mountaineercatholic.com
www.mountcarmelsaipan.com
www.mystpatricks.com
www.olgtemple.org
www.ourladyofmercyhillsboro.org
www.ourladyoftheplains.org
www.queenofangelschurch.org
www.sacredheartbushwood.org
www.saintandrewwright.org
www.saintantoninus.org
www.saintbernardbelfield.com
www.st-matthias.net
www.stadalbertschool.net
www.stambroselatham.com
www.stbasilvallejo.org
www.stbrendans.net
www.steustachiusparish.com
www.stfrancis-church.org
www.stjulianaccf.org
www.stlawrencementor.org
www.stmatthewhou.org
www.stmvictoria.org
www.stpeterlindsay.org
www.strichards.com
www.stritaparish.net
www.sttitus.org
www.stwilliams.org
www.swsaints.org
www.thebasilica.org
www.uscatholicmission.org

Other certificates including the domain name holycrossaustin.org

(limited to 100 certificates)
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org

Certificate

The complete raw certificate details for holycrossaustin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2kxnnO7d+nOsPEArYKd
jySmIGciTrmYDKZWFi/LDPbOXMqWJleGx/1jJa6Wz8hCoscOatEdt8OmPVg8H6mn
KhHSlkvIrOO+LZOhnjmg9P1JjUg+rDbYcOPy+/24JHybdkOo2mQkeZIoSze97zZH
dVRQdnNCP6i8vqt1uwSDuHpGQpJojIJF44EJ7/O6Gwl13DN96s5/IG0o4Y7Ku+/k
soINwUQuUIZN35IdZLIPC9WaTQk7+Sl39ey430Uf3EtPSXjahd89UKns7QuI6C9x
KqjXoQsQwzX9WlrsUQMi3HtYwJVQr9q9ue9fQovSCGOod1KDJHC4qmfftxdCjkxU
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299513184368650385395718305120039304185919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 05:49:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-14 05:49:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holycrossaustin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24163389256483252851593694932220470557756641271940298432606170905616667154160668659022256524145793150014625676144108697272068194576618376660371384482045618334695442474894933065812328355132336245699145886967026156661879519696017744462956475686136072591653072220271717759468860541781262758198389013513051601452834794047415927923225992700613254791113468148569891626917429669719547767341798812275028894717578993034020778530050237880846782883976884419823548329448769806553255914727089729858627343824507980683005169302782985844199547464622702923849727665071878437640735666487811188952305818683469500531398989462433694503987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							537d39b61921e38a5dae38ecf950e03b62c0ba6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2031 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.morecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscatholicmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscatholicmission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016367b5bb27000004030047304502202b08107dae37e730cf1c483889327fbce2d4a8890bfe63a0e95f656c7a84deb6022100ba4eef356097771a0edc62f96a73988bfb37e5e6568dcf0ef7a7b45260f22bfe007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016367b5bb440000040300463044022044ac75db5921b78f57500a43f21d03d28f9fb0b395bc6fdd6ccc57f8da6b9c99022015f87325ae7ce8c90b0ecb092c0b7ee6e593f4c0199457cdeed770007670ae33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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