www.holyfamilylindale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:57:57:91:c5:51:ec:2c:e8:f8:f3:47:89:c3:be:12:ba:2c was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilylindale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:57:91:c5:51:ec:2c:e8:f8:f3:47:89:c3:be:12:ba:2c
Serial Number (int): 378170109369965673977027689023080930392620
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:88:b3:eb:c3:a5:87:0c:f1:29:6d:a1:69:03:f9:c1:54:3d:53:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:e5:6a:40:d6:9f:1c:f7:40:fb:da:eb:5e:88:dc:f8:2b:2e:99:79
Fingerprint (sha256): 28:d5:2d:16:be:34:87:eb:6d:3b:4b:3e:9a:e0:30:8b:3a:9c:cc:46:1b:be:2c:53:7a:6e:ce:25:61:1d:f7:71

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holyfamilylindale.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilylindale.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinaszanesville.org
athenscatholic.org
cathedralofsaintpaul.com
catholic-community.org
ccm847.org
christthekingparish.org
churchofholyspiritwebster.org
corpuschristimaine.org
fortbelvoircatholiccommunity.com
goodshepherdparish.us
holyfamilycluster.org
holyfamilylindale.org
holyspiritnewington.org
hryaya.org
icaugusta.org
icceaston.org
immaculateconceptionsacramento.org
jp2denton.org
mostholytrinitychurch.org
olpchurch.com
olvcathedral.org
piquacatholic.org
piquaparishes.org
saintpaulofthecross.org
sanjuanshrinesa.com
school.st-ignatius.org
seaschurch.com
sfnortonshores.com
sjcstx.org
sjwhf.org
sorrowspetawawa.com
ssjohnpaul.org
st-teresa.com
stclarecatholic.org
stgregorythegreatchurch.org
sthelena.org
stjamesgrafton.com
stjoepittsfield.com
stjoseph-elkgrove.net
stjta.org
stmarychurch.net
stmarydekalb.org
stmaryslaporte.com
stpeterrockets.org
stscholastica.org
sttheresaij.org
stthomaspilotpoint.org
visitationhome.org
www.aquinaszanesville.org
www.athenscatholic.org
www.cathedralofsaintpaul.com
www.catholic-community.org
www.ccm847.org
www.christthekingparish.org
www.churchofholyspiritwebster.org
www.corpuschristimaine.org
www.fortbelvoircatholiccommunity.com
www.goodshepherdparish.us
www.holyfamilycluster.org
www.holyfamilylindale.org
www.holyspiritnewington.org
www.hryaya.org
www.icaugusta.org
www.icceaston.org
www.immaculateconceptionsacramento.org
www.jp2denton.org
www.mostholytrinitychurch.org
www.olpchurch.com
www.olvcathedral.org
www.piquacatholic.org
www.piquaparishes.org
www.saintpaulofthecross.org
www.sanjuanshrinesa.com
www.seaschurch.com
www.sfnortonshores.com
www.sjcstx.org
www.sjwhf.org
www.sorrowspetawawa.com
www.ssjohnpaul.org
www.st-teresa.com
www.stclarecatholic.org
www.stgregorythegreatchurch.org
www.sthelena.org
www.stjamesgrafton.com
www.stjameswashington.org
www.stjoepittsfield.com
www.stjoseph-elkgrove.net
www.stjta.org
www.stmarychurch.net
www.stmarydekalb.org
www.stmaryslaporte.com
www.stpeterrockets.org
www.stscholastica.org
www.sttheresaij.org
www.stthomaspilotpoint.org
www.visitationhome.org

Other certificates including the domain name holyfamilylindale.org

(limited to 100 certificates)
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org

Certificate

The complete raw certificate details for www.holyfamilylindale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZzCCDE+gAwIBAgISBFdXkcVR7Czo+PNHicO+ErosMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MTQwNjUzMDBaFw0x
NzEyMTMwNjUzMDBaMCQxIjAgBgNVBAMTGXd3dy5ob2x5ZmFtaWx5bGluZGFsZS5v
cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrGsqosYBRMQGiCSV
+Kr5gbRb/72OnOI1ExdZf4o//+nMJin5khakXxvpXQUctTjkAPsa20x97lh7YOY3
nIfu1KMWMpxlR1jIoyGwgRLI5+bDNUH48+1aKwHIFDeyNY0BWMhiu3uUkaE9Suaj
KCnyi5QHS7raQrNWAXsxBCb0Vfo1IQayvpzQCMBXLpI9oKp9Jv99oK9LO+D2/oeq
hM2lTVciLX6jpoN+IyXjG52RRZflpiGxpgzDUlhgNMViRR9mZTJ7p6AQIbJmoDiS
74fXE87365fyzJOGA2b+PX7UTVVgAZUDYUyzib+Jhu4EbZr6x4vfjTtsMv8/hN43
dV6vAgMBAAGjggprMIIKZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJiIs+vDpYcM
8SltoWkD+cFUPVMtMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wggh0BgNVHREEgghrMIIIZ4IVYXF1aW5hc3phbmVzdmls
bGUub3JnghJhdGhlbnNjYXRob2xpYy5vcmeCGGNhdGhlZHJhbG9mc2FpbnRwYXVs
LmNvbYIWY2F0aG9saWMtY29tbXVuaXR5Lm9yZ4IKY2NtODQ3Lm9yZ4IXY2hyaXN0
dGhla2luZ3BhcmlzaC5vcmeCHWNodXJjaG9maG9seXNwaXJpdHdlYnN0ZXIub3Jn
ghZjb3JwdXNjaHJpc3RpbWFpbmUub3JngiBmb3J0YmVsdm9pcmNhdGhvbGljY29t
bXVuaXR5LmNvbYIVZ29vZHNoZXBoZXJkcGFyaXNoLnVzghVob2x5ZmFtaWx5Y2x1
c3Rlci5vcmeCFWhvbHlmYW1pbHlsaW5kYWxlLm9yZ4IXaG9seXNwaXJpdG5ld2lu
Z3Rvbi5vcmeCCmhyeWF5YS5vcmeCDWljYXVndXN0YS5vcmeCDWljY2Vhc3Rvbi5v
cmeCImltbWFjdWxhdGVjb25jZXB0aW9uc2FjcmFtZW50by5vcmeCDWpwMmRlbnRv
bi5vcmeCGW1vc3Rob2x5dHJpbml0eWNodXJjaC5vcmeCDW9scGNodXJjaC5jb22C
EG9sdmNhdGhlZHJhbC5vcmeCEXBpcXVhY2F0aG9saWMub3JnghFwaXF1YXBhcmlz
aGVzLm9yZ4IXc2FpbnRwYXVsb2Z0aGVjcm9zcy5vcmeCE3Nhbmp1YW5zaHJpbmVz
YS5jb22CFnNjaG9vbC5zdC1pZ25hdGl1cy5vcmeCDnNlYXNjaHVyY2guY29tghJz
Zm5vcnRvbnNob3Jlcy5jb22CCnNqY3N0eC5vcmeCCXNqd2hmLm9yZ4ITc29ycm93
c3BldGF3YXdhLmNvbYIOc3Nqb2hucGF1bC5vcmeCDXN0LXRlcmVzYS5jb22CE3N0
Y2xhcmVjYXRob2xpYy5vcmeCG3N0Z3JlZ29yeXRoZWdyZWF0Y2h1cmNoLm9yZ4IM
c3RoZWxlbmEub3JnghJzdGphbWVzZ3JhZnRvbi5jb22CE3N0am9lcGl0dHNmaWVs
ZC5jb22CFXN0am9zZXBoLWVsa2dyb3ZlLm5ldIIJc3RqdGEub3JnghBzdG1hcnlj
aHVyY2gubmV0ghBzdG1hcnlkZWthbGIub3JnghJzdG1hcnlzbGFwb3J0ZS5jb22C
EnN0cGV0ZXJyb2NrZXRzLm9yZ4IRc3RzY2hvbGFzdGljYS5vcmeCD3N0dGhlcmVz
YWlqLm9yZ4IWc3R0aG9tYXNwaWxvdHBvaW50Lm9yZ4ISdmlzaXRhdGlvbmhvbWUu
b3Jnghl3d3cuYXF1aW5hc3phbmVzdmlsbGUub3JnghZ3d3cuYXRoZW5zY2F0aG9s
aWMub3Jnghx3d3cuY2F0aGVkcmFsb2ZzYWludHBhdWwuY29tghp3d3cuY2F0aG9s
aWMtY29tbXVuaXR5Lm9yZ4IOd3d3LmNjbTg0Ny5vcmeCG3d3dy5jaHJpc3R0aGVr
aW5ncGFyaXNoLm9yZ4Ihd3d3LmNodXJjaG9maG9seXNwaXJpdHdlYnN0ZXIub3Jn
ghp3d3cuY29ycHVzY2hyaXN0aW1haW5lLm9yZ4Ikd3d3LmZvcnRiZWx2b2lyY2F0
aG9saWNjb21tdW5pdHkuY29tghl3d3cuZ29vZHNoZXBoZXJkcGFyaXNoLnVzghl3
d3cuaG9seWZhbWlseWNsdXN0ZXIub3Jnghl3d3cuaG9seWZhbWlseWxpbmRhbGUu
b3Jnght3d3cuaG9seXNwaXJpdG5ld2luZ3Rvbi5vcmeCDnd3dy5ocnlheWEub3Jn
ghF3d3cuaWNhdWd1c3RhLm9yZ4IRd3d3LmljY2Vhc3Rvbi5vcmeCJnd3dy5pbW1h
Y3VsYXRlY29uY2VwdGlvbnNhY3JhbWVudG8ub3JnghF3d3cuanAyZGVudG9uLm9y
Z4Idd3d3Lm1vc3Rob2x5dHJpbml0eWNodXJjaC5vcmeCEXd3dy5vbHBjaHVyY2gu
Y29tghR3d3cub2x2Y2F0aGVkcmFsLm9yZ4IVd3d3LnBpcXVhY2F0aG9saWMub3Jn
ghV3d3cucGlxdWFwYXJpc2hlcy5vcmeCG3d3dy5zYWludHBhdWxvZnRoZWNyb3Nz
Lm9yZ4IXd3d3LnNhbmp1YW5zaHJpbmVzYS5jb22CEnd3dy5zZWFzY2h1cmNoLmNv
bYIWd3d3LnNmbm9ydG9uc2hvcmVzLmNvbYIOd3d3LnNqY3N0eC5vcmeCDXd3dy5z
andoZi5vcmeCF3d3dy5zb3Jyb3dzcGV0YXdhd2EuY29tghJ3d3cuc3Nqb2hucGF1
bC5vcmeCEXd3dy5zdC10ZXJlc2EuY29tghd3d3cuc3RjbGFyZWNhdGhvbGljLm9y
Z4Ifd3d3LnN0Z3JlZ29yeXRoZWdyZWF0Y2h1cmNoLm9yZ4IQd3d3LnN0aGVsZW5h
Lm9yZ4IWd3d3LnN0amFtZXNncmFmdG9uLmNvbYIZd3d3LnN0amFtZXN3YXNoaW5n
dG9uLm9yZ4IXd3d3LnN0am9lcGl0dHNmaWVsZC5jb22CGXd3dy5zdGpvc2VwaC1l
bGtncm92ZS5uZXSCDXd3dy5zdGp0YS5vcmeCFHd3dy5zdG1hcnljaHVyY2gubmV0
ghR3d3cuc3RtYXJ5ZGVrYWxiLm9yZ4IWd3d3LnN0bWFyeXNsYXBvcnRlLmNvbYIW
d3d3LnN0cGV0ZXJyb2NrZXRzLm9yZ4IVd3d3LnN0c2Nob2xhc3RpY2Eub3JnghN3
d3cuc3R0aGVyZXNhaWoub3Jnghp3d3cuc3R0aG9tYXNwaWxvdHBvaW50Lm9yZ4IW
d3d3LnZpc2l0YXRpb25ob21lLm9yZzCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
DQEBCwUAA4IBAQCUeg07gR9Nq8WHnbuprVDamkTz1KhO4s1Amey+QUYkpkjlCPqA
9NYIL5yZcTs49AZ1HutxQisx4244cLdS4HhL62FcLv06LsWGB26uWFOIDt5btxCp
GOPE9UYEJfS6uhOZwtMYhRsK6b7iaV5yECbOCjL0DGKa+0hoUFpoPl+8CRKwZFEZ
3KHf4jWcy5Is+PN+Q6ie12WL5Jj4nDTPsPKQ6z4CBHIzB1jboqIYJ8F8AKYzI0sT
EVneVYpWdtK2q2BexCsAmA7NuQ+xTJS/sAZqwECHltnP2u3UA5PLz2Dighq353NS
WaTbf9zQFGxZ7e5E5S3o0iLIVORLV1nl6Xa0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaxrKqLGAUTEBogklfiq
+YG0W/+9jpziNRMXWX+KP//pzCYp+ZIWpF8b6V0FHLU45AD7GttMfe5Ye2DmN5yH
7tSjFjKcZUdYyKMhsIESyOfmwzVB+PPtWisByBQ3sjWNAVjIYrt7lJGhPUrmoygp
8ouUB0u62kKzVgF7MQQm9FX6NSEGsr6c0AjAVy6SPaCqfSb/faCvSzvg9v6HqoTN
pU1XIi1+o6aDfiMl4xudkUWX5aYhsaYMw1JYYDTFYkUfZmUye6egECGyZqA4ku+H
1xPO9+uX8syThgNm/j1+1E1VYAGVA2FMs4m/iYbuBG2a+seL3407bDL/P4TeN3Ve
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378170109369965673977027689023080930392620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-14 06:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 06:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilylindale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20409389889565499685209412830789765632440566864802424211490668969380792736055712492507017107911904330316849119287510689933456555972076503173419326482632637254967842713050514777554133139447872475242273333301666230092910596860903304947665073387991335817092694317303153854843014078277912065301070955179669357568826822684050491131163796380371645382354135483433014001394169318909977539917807241728642070662385519145869470748274703260591278105464721297868212587408237071036955870551057873158804471385615292876414703079138624861007154525051966263175228784853935038165042773887926846619761476445905616555119411053989490679471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9888b3ebc3a5870cf1296da16903f9c1543d532d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.st-ignatius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationhome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationhome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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