www.holyfamilylindale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b3:ce:46:a2:0d:29:4b:0d:84:8c:29:4b:f6:c3:bc:58:b3 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilylindale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b3:ce:46:a2:0d:29:4b:0d:84:8c:29:4b:f6:c3:bc:58:b3
Serial Number (int): 409633875120593863177122859624952175024307
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:6a:94:1e:84:bb:07:2f:b0:29:22:26:b0:86:7e:5c:23:22:87:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:fc:18:ee:45:14:d9:ae:b5:bd:53:15:ad:6e:cd:5a:e4:72:03:16
Fingerprint (sha256): 27:8f:8e:8b:e0:a1:f8:ae:8a:3b:19:ab:52:12:0c:04:6c:c2:37:78:ff:08:da:0f:44:7f:d1:a4:62:cc:73:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holyfamilylindale.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilylindale.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinaszanesville.org
athenscatholic.org
cathedralofsaintpaul.com
catholic-community.org
ccm847.org
christthekingparish.org
churchofholyspiritwebster.org
corpuschristimaine.org
fortbelvoircatholiccommunity.com
goodshepherdparish.us
holyfamilycluster.org
holyfamilylindale.org
holyspiritnewington.org
hryaya.org
icaugusta.org
icceaston.org
immaculateconceptionsacramento.org
jp2denton.org
mostholytrinitychurch.org
olpchurch.com
olvcathedral.org
piquacatholic.org
piquaparishes.org
saintpaulofthecross.org
sanjuanshrinesa.com
school.st-ignatius.org
seaschurch.com
sfnortonshores.com
sjcstx.org
sjwhf.org
sorrowspetawawa.com
ssjohnpaul.org
st-teresa.com
stclarecatholic.org
stgregorythegreatchurch.org
sthelena.org
stjamesgrafton.com
stjoepittsfield.com
stjoseph-elkgrove.net
stjta.org
stmarychurch.net
stmarydekalb.org
stmaryslaporte.com
stpeterrockets.org
stscholastica.org
sttheresaij.org
stthomaspilotpoint.org
visitationhome.org
www.aquinaszanesville.org
www.athenscatholic.org
www.cathedralofsaintpaul.com
www.catholic-community.org
www.ccm847.org
www.christthekingparish.org
www.churchofholyspiritwebster.org
www.corpuschristimaine.org
www.fortbelvoircatholiccommunity.com
www.goodshepherdparish.us
www.holyfamilycluster.org
www.holyfamilylindale.org
www.holyspiritnewington.org
www.hryaya.org
www.icaugusta.org
www.icceaston.org
www.immaculateconceptionsacramento.org
www.jp2denton.org
www.mostholytrinitychurch.org
www.olpchurch.com
www.olvcathedral.org
www.piquacatholic.org
www.piquaparishes.org
www.saintpaulofthecross.org
www.sanjuanshrinesa.com
www.seaschurch.com
www.sfnortonshores.com
www.sjcstx.org
www.sjwhf.org
www.sorrowspetawawa.com
www.ssjohnpaul.org
www.st-teresa.com
www.stclarecatholic.org
www.stgregorythegreatchurch.org
www.sthelena.org
www.stjamesgrafton.com
www.stjameswashington.org
www.stjoepittsfield.com
www.stjoseph-elkgrove.net
www.stjta.org
www.stmarychurch.net
www.stmarydekalb.org
www.stmaryslaporte.com
www.stpeterrockets.org
www.stscholastica.org
www.sttheresaij.org
www.stthomaspilotpoint.org
www.visitationhome.org

Other certificates including the domain name holyfamilylindale.org

(limited to 100 certificates)
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org

Certificate

The complete raw certificate details for www.holyfamilylindale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16RX1SO25VsEdazWiPa7
NKpRN0yUw05VMP4Kiitznm9v6QkblcnnEFW/XJiaOUQgD8oZF1oi9O0hNE5kmT/G
JpscwTOzoqYzDY/U92tBvKSx/XLjIIUjDArjIK61sachav/usUvTX54D3SBINTLu
abEq8UHX6SulfZvFt9JMKu16B1mxMfhzILXwJcBnbTkPBPNEOrUz7MVMhSpJkv2Q
p2ReLp1Szd/mW7TM1be0p5qOIyBrRttn114euKtlnM8mRsCBCw3mGuZxUD/Aeex0
xAe9cGP+VsnMVAR5lUDBNz6+Tm5zPhB9cEndjyi26WcWaDdXOsXfz1eJysOUCI/u
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409633875120593863177122859624952175024307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 04:11:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 04:11:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilylindale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27222276168765171529787781917924410206544322119823976557877174193632392606832893697221619944214559961192583138812749276845930317144217990899588959072734908838199158207185276654374334995607098961047866715844277942836835238007974443503611275710086761801641237836767559252697349079052868304672190082027341412753728202118829792519627092097789119374889144581734983612755966736252305475998892689700043875442423074958839159574944165249367127919475217771573967220478156757607336111770543473493658530280403304323313488563933548411466566444308325378328859767293359884897837902719291540740107614694804166692097653449171955346953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c56a941e84bb072fb0292226b0867e5c232287db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.st-ignatius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationhome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationhome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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