www.holyfamilylindale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:91:74:b1:04:e0:52:3b:94:82:82:55:25:0d:6c:22:de was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilylindale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:91:74:b1:04:e0:52:3b:94:82:82:55:25:0d:6c:22:de
Serial Number (int): 305426627084279041120102041296442867065566
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:f7:ac:5b:86:21:4d:eb:84:f9:8c:dc:e4:85:c4:fd:bf:d1:06:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:8b:e6:fb:0c:58:97:b2:3a:82:41:13:f4:3d:70:65:a1:30:37:a9
Fingerprint (sha256): 28:2d:cf:d8:70:52:98:5f:94:0d:26:dd:e2:a0:1e:ba:90:28:e3:5b:19:d8:5b:d9:10:da:29:af:3f:60:b5:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.holyfamilylindale.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilylindale.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinaszanesville.org
athenscatholic.org
cathedralofsaintpaul.com
catholic-community.org
ccm847.org
christthekingparish.org
churchofholyspiritwebster.org
corpuschristimaine.org
fortbelvoircatholiccommunity.com
goodshepherdparish.us
holyfamilycluster.org
holyfamilylindale.org
holyspiritnewington.org
hryaya.org
icaugusta.org
icceaston.org
immaculateconceptionsacramento.org
jp2denton.org
mostholytrinitychurch.org
olpchurch.com
olvcathedral.org
piquacatholic.org
piquaparishes.org
saintpaulofthecross.org
saintpeters.eu
sanjuanshrinesa.com
school.st-ignatius.org
seaschurch.com
sfnortonshores.com
sjcstx.org
sjwhf.org
sorrowspetawawa.com
ssjohnpaul.org
st-teresa.com
stclarecatholic.org
stgregorythegreatchurch.org
sthelena.org
stjamesgrafton.com
stjoepittsfield.com
stjoseph-elkgrove.net
stjta.org
stmarychurch.net
stmarydekalb.org
stmaryslaporte.com
stpeterrockets.org
stscholastica.org
sttheresaij.org
stthomaspilotpoint.org
visitationhome.org
www.aquinaszanesville.org
www.athenscatholic.org
www.cathedralofsaintpaul.com
www.catholic-community.org
www.ccm847.org
www.christthekingparish.org
www.churchofholyspiritwebster.org
www.corpuschristimaine.org
www.fortbelvoircatholiccommunity.com
www.goodshepherdparish.us
www.holyfamilycluster.org
www.holyfamilylindale.org
www.holyspiritnewington.org
www.hryaya.org
www.icaugusta.org
www.icceaston.org
www.immaculateconceptionsacramento.org
www.jp2denton.org
www.mostholytrinitychurch.org
www.olpchurch.com
www.olvcathedral.org
www.piquacatholic.org
www.piquaparishes.org
www.saintpaulofthecross.org
www.saintpeters.eu
www.sanjuanshrinesa.com
www.seaschurch.com
www.sfnortonshores.com
www.sjcstx.org
www.sjwhf.org
www.sorrowspetawawa.com
www.ssjohnpaul.org
www.st-teresa.com
www.stclarecatholic.org
www.stgregorythegreatchurch.org
www.sthelena.org
www.stjamesgrafton.com
www.stjameswashington.org
www.stjoepittsfield.com
www.stjoseph-elkgrove.net
www.stjta.org
www.stmarychurch.net
www.stmarydekalb.org
www.stmaryslaporte.com
www.stpeterrockets.org
www.stscholastica.org
www.sttheresaij.org
www.stthomaspilotpoint.org
www.visitationhome.org

Other certificates including the domain name holyfamilylindale.org

(limited to 100 certificates)
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org

Certificate

The complete raw certificate details for www.holyfamilylindale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqGdVAK/xlsIFBWVd2yC
NUCU1qR2VmjK5FSFZr9NNGoT5YLjyjMuu2b4j4t6YMM9wJ2Od4tl+mIZs4KcMMrS
uaCkb5RYnDR4ftpBY4cJCNGL2adovQw7g9KHGqUHAL2b2PRj1b3l9iw7Cda55wBd
6+F5oUYRuw6sRKySM0tTGoHQf6+pCKnBZw2Z+ifofPfdLbriI0xQG2J4+Peh4d68
rO7DgkPZnZZtRzavbJT1RQLTvs2DvwrSzXvsTMNlpGAToZij8kvczMc75ZywYMtA
mddqsUqevCoCOjRXPWkNDN1Fn9B2r3/5VFL2eZcVOxTd/a8I+WV5Ep8zYkKrOSmk
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305426627084279041120102041296442867065566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-23 05:22:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-24 05:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilylindale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23055066615190467656153000286994152512069747200113732856878400954739187362153430387785064419355978877676801494063144763319240220206613250710837066326659529141479704027574919839961004030078157866969466613303683282562168886002235940476327531496609159249224611356462220942039801720896567764346907675919216935655266473104962428189868038102135824360768198515893243705194990242805669584206661519534658029348508311755528056115415810914401345672757642409406016359792562924427829229026391948391177832068638556724560425389169746222086130744765621935329088198707745328860154839877381536488600157312397085916645202735150830036217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21f7ac5b86214deb84f98cdce485c4fdbfd106ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpeters.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.st-ignatius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationhome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpeters.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationhome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e8ed58abd59008813ba409b12939b60075f870f6a12fca3a1a23657c0e0b66e957b29c907f2450aa39f67193366e3df91d92c5cfa93dae8da6b275d5597f5393383f42eb5cf6009b114de4ec50c43f7481476def0246588dc42430593930582cea0c93ad602a55823f19a644a6d6c509edc92520c82ca9c5328058968ed571ece831df3a607327aca86b8539977939085f3d9316015380497003f800bde2806546c5d8c4d9a9d5eb8b45cb277d147dbf1c99a2d4d9500372906f70f900a7b53e8061d65285df2ad3eb995f724d071096ebebd604540c7da06a56f33ea07bffd06148a1d5d2bbfcb76eaee4f514858b52025a9f5a50fe3358d9b13119a1c44e5