www.holyfamilylindale.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:de:3f:24:2e:a3:56:ff:b0:49:79:67:ec:d3:07:c1:f1 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holyfamilylindale.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:de:3f:24:2e:a3:56:ff:b0:49:79:67:ec:d3:07:c1:f1
Serial Number (int): 315737170599338087087266539039451553186289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:41:0f:cc:54:f2:72:e5:c5:9e:ed:c0:a7:19:f2:c2:05:fd:25:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:0c:a8:cc:08:b1:f7:b4:18:8e:19:46:a8:a1:a7:41:70:9d:0e:33
Fingerprint (sha256): 29:09:b5:13:31:aa:1e:34:ee:72:a4:5c:86:5a:15:a2:7f:dc:0b:01:5b:a1:aa:f4:bb:bc:1b:39:bf:72:cb:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.holyfamilylindale.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holyfamilylindale.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinaszanesville.org
athenscatholic.org
cathedralofsaintpaul.com
catholic-community.org
ccm847.org
christthekingparish.org
churchofholyspiritwebster.org
corpuschristimaine.org
fortbelvoircatholiccommunity.com
goodshepherdparish.us
holyfamilycluster.org
holyfamilylindale.org
holyspiritnewington.org
hryaya.org
icaugusta.org
icceaston.org
immaculateconceptionsacramento.org
jp2denton.org
mostholytrinitychurch.org
olpchurch.com
olvcathedral.org
piquacatholic.org
piquaparishes.org
saintpaulofthecross.org
saintpeters.eu
sanjuanshrinesa.com
school.st-ignatius.org
seaschurch.com
sfnortonshores.com
sjcstx.org
sjwhf.org
ssjohnpaul.org
st-teresa.com
stclarecatholic.org
stgregorythegreatchurch.org
sthelena.org
stjamesgrafton.com
stjoepittsfield.com
stjoseph-elkgrove.net
stjta.org
stmarychurch.net
stmarydekalb.org
stmaryslaporte.com
stpeterrockets.org
stscholastica.org
sttheresaij.org
stthomaspilotpoint.org
visitationhome.org
www.aquinaszanesville.org
www.athenscatholic.org
www.cathedralofsaintpaul.com
www.catholic-community.org
www.ccm847.org
www.christthekingparish.org
www.churchofholyspiritwebster.org
www.corpuschristimaine.org
www.fortbelvoircatholiccommunity.com
www.goodshepherdparish.us
www.holyfamilycluster.org
www.holyfamilylindale.org
www.holyspiritnewington.org
www.hryaya.org
www.icaugusta.org
www.icceaston.org
www.immaculateconceptionsacramento.org
www.jp2denton.org
www.mostholytrinitychurch.org
www.olpchurch.com
www.olvcathedral.org
www.piquacatholic.org
www.piquaparishes.org
www.saintpaulofthecross.org
www.saintpeters.eu
www.sanjuanshrinesa.com
www.seaschurch.com
www.sfnortonshores.com
www.sjcstx.org
www.sjwhf.org
www.sorrowspetawawa.com
www.ssjohnpaul.org
www.st-teresa.com
www.stclarecatholic.org
www.stgregorythegreatchurch.org
www.sthelena.org
www.stjamesgrafton.com
www.stjameswashington.org
www.stjoepittsfield.com
www.stjoseph-elkgrove.net
www.stjta.org
www.stmarychurch.net
www.stmarydekalb.org
www.stmaryslaporte.com
www.stpeterrockets.org
www.stscholastica.org
www.sttheresaij.org
www.stthomaspilotpoint.org
www.visitationhome.org

Other certificates including the domain name holyfamilylindale.org

(limited to 100 certificates)
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.holyfamilylindale.org
www.holyfamilylindale.org
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.stbonifacesttherese.com
www.holyfamilylindale.org

Certificate

The complete raw certificate details for www.holyfamilylindale.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XTUKZg4W1JSYYnqQnz
ss96loRZxsAZ70BgFiv2JEuQoOFiyfmcuuohFo8didrje1RPDR4oEyPcT8dQd8BA
xajpKoCeKzz9KG2i+cyf8IE4LhlBYIfJejMPRm+YOSN0xSiLpFCb0pvZFneF8bRU
+ywt3z0Q04Dsb9VoT32if9yey37CuizRT2718OAZ+Gi8ktGx2AjjhrlLH95FHKlZ
NQaJ6BNmIzJO+OPE9exHRcc81bjWwshGfmrH4G2XaZT7cN6GbCXAEEoefaMhybk3
SNyhZ+PH3ZwAxuAkHg6qEd7yn/9Tk6sO+1lOfc2pf1mTUpmVuB/KfWQt8obR6s9g
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315737170599338087087266539039451553186289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-14 04:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-12 04:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holyfamilylindale.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21187238188265701062459361367422197857180943279476209383350431633325830420086048257682572560366417579774715255128822972711478415202878090382447245089500359344471745907759575631988794554093989930747769100481526455238109016080894998480572530242468359712489656745129239436145610516029471238458354056582683803925785312284590178520060404498193000882155045965426396577793582134903155760921335294260591318404120407663998650597167088240051029335559556131070035334930234668881943668979227616078937788571658672238203367408032293081700995892997118209983263112679772143320505003405664671872018896349083785735379152767089439105093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85410fcc54f272e5c59eedc0a719f2c205fd2527
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpeters.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.st-ignatius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationhome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquinaszanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athenscatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofsaintpaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-community.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccm847.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christthekingparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofholyspiritwebster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortbelvoircatholiccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdparish.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilycluster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilylindale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritnewington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hryaya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icaugusta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icceaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jp2denton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostholytrinitychurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piquaparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpaulofthecross.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpeters.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuanshrinesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaschurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfnortonshores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjwhf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorrowspetawawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssjohnpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-teresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorythegreatchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelena.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoepittsfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-elkgrove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarychurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryslaporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterrockets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stscholastica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresaij.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomaspilotpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationhome.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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