christthekingparish.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:fd:b5:e9:03:92:b7:4e:98:78:5d:0f:1c:44:a0:c1:f2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=christthekingparish.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:fd:b5:e9:03:92:b7:4e:98:78:5d:0f:1c:44:a0:c1:f2
Serial Number (int): 300806569205938170312203277086108466332146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:1c:b9:f6:03:93:32:18:4b:a7:f8:91:c4:e4:b0:5d:07:28:9d:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:db:b4:8c:29:5f:55:a9:b4:d3:fc:b1:4f:6c:6a:0f:d9:df:8c:b7
Fingerprint (sha256): 25:75:41:56:6c:63:4c:f0:48:e7:b2:61:b7:54:44:39:74:59:31:52:2c:07:9d:58:1c:3e:32:1f:df:63:e8:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate christthekingparish.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for christthekingparish.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggiecatholic.org
ascsfw.org
catholic-community.org
christthekingparish.org
fatherjoshua.com
globaloutreachprogram.com
goodshepherdchurch.us
goodshepherdparish.us
holytrinitysat.org
hrclarksville.org
jmuccm.com
mhtangleton.org
mqcatholics.org.au
nfpccanada.ca
ollchapin.org
ololchurch.org
olpchurch.com
parish.stanthony-clarksville.org
raidercatholics.com
sacredheartrowlett.org
sacredheartschooldc.org
saintannies.org
saintstephenchurch.org
sanjuanshrinesa.com
scsglenwood.org
seaschurch.com
sjcpenfield.com
sjnfreetown.org
sjnmtl.org
ssjohnpaul.org
stannparish.org
steulalia-stgabriel.org
stfelicitas-school.org
sthelena.org
stignatiushickory.org
stjameswashington.org
stjoeyouth.com
stjudethaddeus.net
stmartha.com
stmarydekalb.org
stmarygraham.org
stmaryss.org
stmaryswest.com
stmaximilian.org
stpaulowosso.org
strosesv.com
stsimonchurch.org
ststephen1885.org
thetalk.org
truecrosschurch.org
wucatholic.com
www.aggiecatholic.org
www.ascsfw.org
www.catholic-community.org
www.fatherjoshua.com
www.globaloutreachprogram.com
www.goodshepherdchurch.us
www.goodshepherdparish.us
www.holytrinitysat.org
www.hrclarksville.org
www.jmuccm.com
www.mhtangleton.org
www.mqcatholics.org.au
www.nfpccanada.ca
www.ollchapin.org
www.ololchurch.org
www.olpchurch.com
www.raidercatholics.com
www.sacredheartrowlett.org
www.sacredheartschooldc.org
www.saintannies.org
www.saintstephenchurch.org
www.sanjuanshrinesa.com
www.scsglenwood.org
www.seaschurch.com
www.sjcpenfield.com
www.sjnfreetown.org
www.sjnmtl.org
www.ssjohnpaul.org
www.stannparish.org
www.steulalia-stgabriel.org
www.stfelicitas-school.org
www.sthelena.org
www.stignatiushickory.org
www.stjameswashington.org
www.stjoeyouth.com
www.stjudethaddeus.net
www.stmartha.com
www.stmarydekalb.org
www.stmarygraham.org
www.stmaryss.org
www.stmaryswest.com
www.stmaximilian.org
www.stpaulowosso.org
www.strosesv.com
www.stsimonchurch.org
www.ststephen1885.org
www.thetalk.org
www.truecrosschurch.org
www.wucatholic.com

Other certificates including the domain name christthekingparish.org

(limited to 100 certificates)
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
christthekingparish.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
christthekingparish.org
www.stbonifacesttherese.com
christthekingparish.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
christthekingparish.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
christthekingparish.org
www.stbonifacesttherese.com
christthekingparish.org
christthekingparish.org
christthekingparish.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
christthekingparish.org
www.stbonifacesttherese.com
christthekingparish.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
christthekingparish.org
christthekingparish.org
christthekingparish.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org

Certificate

The complete raw certificate details for christthekingparish.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszfX+8+9VdBsPIRnEmIH
sJHoy0b7HCTkfU15p/+xvBM6FxKzPXmjUnqNqB+umyjmClQM0YROSXTYckQQlbhP
X/teEKTQcoWjggErCSulfIWXWlrOzP80PyUYKUILZV5VEP4MNt/qOIpBngBWhnN2
2q0gZ4pr2vZ7iUzRWBS0FlBXws6ylCDDp7u1+PZagR81lAOBh7x3/h/+0RpVyt55
A73TA9cE/6Q8xI16mtpdsAvpXSQRzU5uc6UDGgRc6TNSsO8pLDj2Yrzd9YRGuKZm
2knI9zofENoOmNXeG7fbMFGE0XIkB5SA+qZFv0quOGFpCtyTK4n4OrPMkfxpe388
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300806569205938170312203277086108466332146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 12:17:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 12:17:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christthekingparish.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22624194136873101038734263937067453862026565361488801528944780613600735589194769113194626380385052522324155718899830528618372505494237541687353736087406776464934635947131677348189441681749652128447769985060717927839799494995477178663223171512742704227503833099635140995592880259014445262520958447565976943858439780227502404465145814445941432764746190856737371274005929402814570104557732257611764154574232524838080229904781734953619551158989013458889324428916255176166450956424101241273408751156804601157325166376032294451344863989903808655465351497560594115216956727453167178328692448639990556334493705530425382747177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee1cb9f6039332184ba7f891c4e4b05d07289dc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2065 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stanthony-clarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wucatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wucatholic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163da65891300000403004630440220008d88f3c1e74cc1675aa24858ca36ed006c7d1ec1f601d61e67527acd6d2211022062127d70de31ccd3816cc8f1e90a84a3b048a8656c6be5a56f6d60f9cbe5e7fe007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163da6589c90000040300483046022100de4ae7d9711c5c5fa692ab9922257339f1ac7cdcc4f75b20446da303d8aceb75022100e45ca1faae61008d58c61335c62e268ad573de6683fe8e1fde7140f7b5a70069
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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