stjameswashington.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:0e:dd:f9:ff:4a:85:32:17:14:2a:97:bb:c4:63:66:72 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stjameswashington.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:0e:dd:f9:ff:4a:85:32:17:14:2a:97:bb:c4:63:66:72
Serial Number (int): 290280620743653470018193281005656184415858
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:ea:c2:63:78:c9:ac:d7:9e:7d:d2:a6:0d:e5:34:eb:80:e9:35:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:57:fd:b3:74:31:c0:3b:1a:ad:cb:fd:ae:3f:a6:c5:f1:5f:8c:92
Fingerprint (sha256): 29:3b:6c:0a:5f:1e:6d:6f:b2:d3:b2:9d:bb:0f:bf:48:17:f5:62:03:c2:98:47:bc:fa:87:68:f5:39:03:e0:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate stjameswashington.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjameswashington.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggiecatholic.org
ascsfw.org
catholic.tulane.edu
cwiaholyspirit.org
english.dljc.org
espanol.dljc.org
fatherjoshua.com
globaloutreachprogram.com
goodshepherdchurch.us
holytrinitysat.org
hrclarksville.org
ihmparishlansing.org
jmuccm.com
mhtangleton.org
mqcatholics.org.au
nfpccanada.ca
ollchapin.org
ololchurch.org
ourladyvictory.org
parish.stanthony-clarksville.org
princeofpeaceormond.com
raidercatholics.com
sacredheartrowlett.org
sacredheartschooldc.org
saintannies.org
saintstephenchurch.org
scsglenwood.org
sjcpenfield.com
sjnfreetown.org
sjnmtl.org
stannparish.org
steulalia-stgabriel.org
stfelicitas-school.org
stignatiushickory.org
stjameswashington.org
stjoeyouth.com
stjosephcecilia.com
stjudethaddeus.net
stmartha.com
stmarygraham.org
stmaryss.org
stmaryswest.com
stmaximilian.org
stpaulowosso.org
strosesv.com
stsimonchurch.org
ststephen1885.org
thetalk.org
truecrosschurch.org
wucatholic.com
www.aggiecatholic.org
www.ascsfw.org
www.cwiaholyspirit.org
www.fatherjoshua.com
www.globaloutreachprogram.com
www.goodshepherdchurch.us
www.holytrinitysat.org
www.hrclarksville.org
www.ihmparishlansing.org
www.jmuccm.com
www.ladyofhope.org
www.mhtangleton.org
www.mqcatholics.org.au
www.nfpccanada.ca
www.ollchapin.org
www.ololchurch.org
www.ourladyvictory.org
www.princeofpeaceormond.com
www.raidercatholics.com
www.sacredheartrowlett.org
www.sacredheartschooldc.org
www.saintannies.org
www.saintstephenchurch.org
www.scsglenwood.org
www.sjcpenfield.com
www.sjnfreetown.org
www.sjnmtl.org
www.stannparish.org
www.steulalia-stgabriel.org
www.stfelicitas-school.org
www.stignatiushickory.org
www.stjoeyouth.com
www.stjosephcecilia.com
www.stjudethaddeus.net
www.stmartha.com
www.stmarygraham.org
www.stmaryss.org
www.stmaryswest.com
www.stmaximilian.org
www.stpaulowosso.org
www.strosesv.com
www.stsimonchurch.org
www.ststephen1885.org
www.thetalk.org
www.truecrosschurch.org
www.wucatholic.com
www.ysucsa.org
ysucsa.org

Other certificates including the domain name stjameswashington.org

(limited to 100 certificates)
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
stjameswashington.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
christthekingparish.org
stjameswashington.org
christthekingparish.org
stjameswashington.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
christthekingparish.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
www.holyfamilylindale.org
stjameswashington.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
www.holyfamilylindale.org
christthekingparish.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
christthekingparish.org

Certificate

The complete raw certificate details for stjameswashington.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRv8dpZrcelzgIp3xZ+N
aXBeOjckiVCHRnUqiZNSxlSaU8yNRCE1uxW6rTNpBBj5/gDu9dLeSoYhJJl9VMxv
YlKDZYfxskZZ5338APoWNq/wMCPGqw8B+hVVOnTshrt8UuS6YAX/vh8zQ6AREL2n
hu3jrk/KqFGDv3kR/n9vjFUjf1OIu4oaEmYFbcE2FYkQ+PmVJ26xvNjz6e6T24zr
bamlcrunbskjZ6Eciuh3mmz71cVt/dMHy2YXhK8bOA/ByF8W4hbZ4steiKHqndPA
Uok4gRCOlT6UeyxclfbLfZkLbaF46e1QlvxD+x2APjqGP3sW+Da4dmfd2WmJPPdG
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290280620743653470018193281005656184415858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-13 21:22:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-13 21:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjameswashington.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20843120821329765250868490487041404948735256721868944174242296406637148162727514005075762910834502662399612707703455263999754044859476669656411998151107504867545916808576984275955770344245857675127921287211432188650479131211142468302787771245281455416559989454255830511099513207416555209627453590171652648994046116194848694869854740828951229968157392787437488759257320014952819010489047452874790921238410460429888453582872515555961236160923846865960297141871325098209081406898608381802923551627282454233571235121497195765787564709959163207405189796881722177910803050575352476345189505007922050913023594006206827939389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26eac26378c9acd79e7dd2a60de534eb80e93526
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2028 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'english.dljc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.dljc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.stanthony-clarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjameswashington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephcecilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wucatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiecatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascsfw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherjoshua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globaloutreachprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodshepherdchurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinitysat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrclarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihmparishlansing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmuccm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladyofhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhtangleton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mqcatholics.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfpccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollchapin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ololchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.princeofpeaceormond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartrowlett.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartschooldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintstephenchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scsglenwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcpenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnfreetown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjnmtl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steulalia-stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfelicitas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stignatiushickory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoeyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephcecilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudethaddeus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygraham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaximilian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulowosso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strosesv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsimonchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ststephen1885.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetalk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truecrosschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wucatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ysucsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysucsa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009340efb12604a6dc6dd17ce3ed08e1a6ac7836eef09ea865bd8ffa18cea3dc0e5306cf11a658aeca63eb2c66685dd47d790e75519ab11820742cdad4d52f17e4606d2880bc06936c893596d2c9eb9c541d15dca992af952e7128d0cf6d8559b5602be3cbe28804044f63fb60099365344fa8bfc5dd926467bc50043690f1e36cf68d84feb2e6d95328f0035acbc5137716e0dba077d12a31bbac3b1623a2816d5e2bf08129639669a71e356fd178aaecc4e36b9c676383290fa1aee24986ef0b5ce85c384d7a1fab1728f6d6e07579c9fc84d6a4fac51b4f161f6508fb9e9f1440067627b0cf1ca69061ffb82518a253f285465f8c118a1ca172ee60ce1a87d3