www.asjb.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3c:3d:c3:e8:a9:7f:43:e9:36:2f:7c:9f:32:4c:e2:1b:e1 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.asjb.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:3d:c3:e8:a9:7f:43:e9:36:2f:7c:9f:32:4c:e2:1b:e1
Serial Number (int): 368948185866875562761619143019914951007201
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:3f:10:a9:55:07:28:76:12:78:c7:ed:af:9a:3f:2e:19:75:6e:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:3a:de:91:ff:03:98:03:15:6e:b2:86:1f:f6:13:6d:26:1e:f9:04
Fingerprint (sha256): 27:af:41:3e:5f:a2:22:1b:d8:d1:8b:d4:d3:2b:a0:43:e9:99:2b:35:7a:91:86:e4:fb:8a:15:ec:de:09:a1:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.asjb.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.asjb.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asjb.org
baylorcatholic.org
caritaswealth.com
catholicfoundationlubbock.org
corpuschristi-detroit.org
ctkcathedral.org
friendsofthecathedral.org
hfwharton.org
holyfamily-vanalstyne.org
holyfamilytym.com
holyfamilyvb.org
johnmichaeltalbot.com
olgcchurch.org
olpssulphur.com
olqh.org
pophouston.org
radiosantisimosacramento.com
sacredheartsusanville.org
saintlouislifeteen.org
saintmarymagdenver.org
sainttheresahalecenter.us
sbscrusaders.com
school.stanne-tomball.org
sfacatholic.net
sscmchurch.org
ssppvirgil.org
st-mm.com
stbernardacts.org
stcatherine.info
stcolumbacatholic.net
stcolumban.org
stelizabethofhungaryalice.org
stgabriel.org
stgall.com
stgerardssm.ca
sthelenslangside.org.uk
stjoachim.org
stjohnchurchterrell.org
stleosminot.org
stmargaret-homer.org
stmarys-waco.org
stmarysnorton.com
stpatrickdallas.org
stpeter.ptdiocese.org
stpiusxsa.org
stromualdschool.org
stthomasfreeport.org
uttylercatholic.org
www.asjb.org
www.baylorcatholic.org
www.caritaswealth.com
www.catholicfoundationlubbock.org
www.corpuschristi-detroit.org
www.ctkcathedral.org
www.friendsofthecathedral.org
www.hfwharton.org
www.holyfamily-vanalstyne.org
www.holyfamilytym.com
www.holyfamilyvb.org
www.johnmichaeltalbot.com
www.olgcchurch.org
www.olpssulphur.com
www.olqh.org
www.pophouston.org
www.radiosantisimosacramento.com
www.sacredheartsusanville.org
www.saintlouislifeteen.org
www.saintmarymagdenver.org
www.sainttheresahalecenter.us
www.sbscrusaders.com
www.sfacatholic.net
www.sscmchurch.org
www.ssppvirgil.org
www.st-mm.com
www.stbernardacts.org
www.stcatherine.info
www.stcolumbacatholic.net
www.stcolumban.org
www.stelizabethofhungaryalice.org
www.stgabriel.org
www.stgall.com
www.stgerardssm.ca
www.sthelenslangside.org.uk
www.stjoachim.org
www.stjohnchurchterrell.org
www.stleosminot.org
www.stmargaret-homer.org
www.stmarkdenton.org
www.stmarys-waco.org
www.stmarysnorton.com
www.stpatrickdallas.org
www.stpeter.ptdiocese.org
www.stpiusxsa.org
www.stromualdschool.org
www.stthomasfreeport.org
www.uttylercatholic.org

Other certificates including the domain name asjb.org

(limited to 100 certificates)
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org

Certificate

The complete raw certificate details for www.asjb.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22teA08KXwfo2/typ/H+
bGtGlQMhTttaKMM7ELivgyY9mDDU6Z286rvEMWs8nr9iYPZDWF19iIaxv6eKjlhF
/ONW+s2S0dYgXCbJ4bwKZXS2bBKIOtJEPn/dNxWZ13xiSdIHAEjav0apOmvo/5TJ
R3PhtdZaMnkMJc+NoDM9AzoU+xT6plnzD5Jx33ikyxjXWPYwOdxzgyFbXaI8kK1R
iOLEOBO9c3HQdfo+Sr839UceZZa9nbF95IwNrLDa4vwj5KfrbMkMr7iVUtx/YxDG
kvzfwBp7Mp37Jwcz20G9x+8zlWb1otWtsopnEcidRAz9aYDPkCoSkUBbbNTHU2XV
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368948185866875562761619143019914951007201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 05:12:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-05 05:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.asjb.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27699133545896664789960583709853560407410770375750040481692696531218826886700006105427560655710569982043804677120382796199662648554833991046682433627458058442388420806591795004901352406600827177025099318653606822999659841789956425896738111095990329471855215043583150480385020231615800874235806368126308746849931496891765888902421475860360808338649902133625804978066443076080965805861937778925456393293443229369024303724924640566965223429649358386868612221873163272727049984462783927783571514427910324398422162409294113957636652081829051467890231309019189572428725436327387878970441010581551945836993058283883514418441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a3f10a9550728761278c7edaf9a3f2e19756e28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asjb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baylorcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caritaswealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpssulphur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosantisimosacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouislifeteen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarymagdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainttheresahalecenter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stanne-tomball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssppvirgil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumban.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stelizabethofhungaryalice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgerardssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchurchterrell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleosminot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarys-waco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeter.ptdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasfreeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uttylercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asjb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylorcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caritaswealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpssulphur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosantisimosacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlouislifeteen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarymagdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainttheresahalecenter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssppvirgil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumban.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stelizabethofhungaryalice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgerardssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchurchterrell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleosminot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkdenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarys-waco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeter.ptdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasfreeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uttylercatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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