www.stbensnd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0c:d0:dc:bc:40:30:5d:2c:d4:78:c3:06:18:04:bb:39:5e was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stbensnd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:d0:dc:bc:40:30:5d:2c:d4:78:c3:06:18:04:bb:39:5e
Serial Number (int): 352810157676702964121401504704420751554910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:da:3d:f4:e0:a4:f0:54:33:73:61:ea:28:8f:5d:62:5a:e6:bd:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:0c:06:c5:13:94:e5:b5:f2:e0:88:6d:a2:89:c6:77:8e:f8:4c:cc
Fingerprint (sha256): 28:dc:aa:f6:f2:14:8f:5a:56:8c:fd:c3:a8:a3:b9:c4:97:f1:c2:d1:a9:14:16:92:96:f4:e0:83:25:05:9e:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stbensnd.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stbensnd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsheights.com
catholicyouthri.com
catholicyouthri.org
centralmcleansaints.com
charityguildshop.org
corbin.cdlex.org
heargodscall.com
holy-rosary.org
kenperronbuilder.com
kidcause.org
mostblessedsacrament.org
pophouston.org.es
sacredheartofjesusonline.org
saint-albert.org
saintmartindetours.org
saintsppta.org
sanjuandiegodallas.org
sjbde.org
sjcparish.org
sjsmst.org
spxschool.org
srolparish.org
st-peter-church.com
stannegorham.com
stbensnd.org
stbernardappleton.org
stbridgetchurch.org
stceciliachurch.org
stgregorys.net
stjohnschoolwinslow.org
stjosephriovista.org
stjparish.com
stmaryelyria.org
stmaryfreeport.com
stncc.net
stpatrickindependence.com
stpaulsmissiontx.org
stphilipcs.com
stsja.org
sttheresa-littleeggharbor.com
stvincentdepauldc.org
stvincentpampa.com
tccesdover.org
thomasmorechurch.org
vitanova.org
wtcsc.org
www.allsaintsheights.com
www.catholicyouthri.com
www.catholicyouthri.org
www.centralmcleansaints.com
www.charityguildshop.org
www.csdo.org
www.heargodscall.com
www.holy-rosary.org
www.kenperronbuilder.com
www.kidcause.org
www.mostblessedsacrament.org
www.pophouston.org.es
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintmartindetours.org
www.saintsppta.org
www.sanjuandiegodallas.org
www.sjbde.org
www.sjcparish.org
www.sjsmst.org
www.spxschool.org
www.srolparish.org
www.st-peter-church.com
www.stannegorham.com
www.stbensnd.org
www.stbernardappleton.org
www.stbridgetchurch.org
www.stceciliachurch.org
www.stgregorys.net
www.stjohnschoolwinslow.org
www.stjosephriovista.org
www.stjparish.com
www.stmaryelyria.org
www.stmaryfreeport.com
www.stncc.net
www.stpatrickindependence.com
www.stpaulsmissiontx.org
www.stphilipcs.com
www.stsja.org
www.sttheresa-littleeggharbor.com
www.stvincentdepauldc.org
www.stvincentpampa.com
www.tccesdover.org
www.thomasmorechurch.org
www.vitanova.org
www.wtcsc.org
www.ymcyoprov.com
ymcyoprov.com

Other certificates including the domain name stbensnd.org

(limited to 100 certificates)
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org

Certificate

The complete raw certificate details for www.stbensnd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+u8+sWtULJ+xBxeW+Sz
6bKztKALmQqdXeF1BMhNz6vkRTuYwOL5Vzni0FJMQHRg6V2jmjxDTfGv7JMoQa1g
18oTRJU09LV2ki55OkxJMvNSwbJOXkePM6BJluVLzWBS+0vF6MXHJ8VT7HZQUrL5
MeunOr3KyrqUN3DEjxlOWa2OcvvXxCZglywcCqaOqqeC3Mf97tqEYvKEDOXFd5wB
sbxOialIPE9voG9FnJ0vf7e0Khh4KlOPQhQJq9EFe9gfPLk0szPDHn57TLNMODAv
lSChVwbmMfeyrbiZd6oneC8QDSn935m2GnGONbzuvJqbqJwEAluc5GqPDYtO0imN
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352810157676702964121401504704420751554910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-22 04:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 04:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stbensnd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25742622747838606570295593026873953022406385901377220541409559600581463026656701272405946515128055678534055336626151987893568792876930432850024884817042689877848691986092080916014639427794178874043658867800903002506268701461386324418673342517021504649238619094691332709083965652497645925592436583877361915634116942811751177887138782117668143976548894497042555883933647780680284442999736328995167360116648151058534524484446797246415287940134542384961092353434113747991758027656267051546134191561932176575770908955793632766102672957760295156334649133591678509944286084708232432043660970996944065563860739083665331031471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8da3df4e0a4f054337361ea288f5d625ae6bd92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corbin.cdlex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostblessedsacrament.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardappleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostblessedsacrament.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardappleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickindependence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcyoprov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcyoprov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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