holycrossaustin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c5:3b:62:ab:75:5a:8d:d7:d9:d4:61:7e:52:9c:9a:89:a1 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holycrossaustin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c5:3b:62:ab:75:5a:8d:d7:d9:d4:61:7e:52:9c:9a:89:a1
Serial Number (int): 415563706784899072705745413924580021143969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:8d:d1:d6:c5:89:f3:d1:c9:b2:c1:8e:8a:b1:16:fd:88:a0:64:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:b0:c6:67:56:34:fe:29:d2:63:d5:84:8a:86:f3:cc:46:fb:80:34
Fingerprint (sha256): 2a:ed:2e:56:3b:40:c2:0a:bf:8a:11:4b:03:e5:2e:71:2f:2e:ce:bf:b0:ac:20:3a:0d:d9:f2:3e:78:0b:52:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holycrossaustin.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holycrossaustin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsamarillo.org
asagr.org
ciscoholyrosary.com
cmvic.net
ctkmandan.com
duluthcathmed.org
epiphanystl.org
holycrossaustin.org
ihrc.net
jesusloveshallreign.net
kjtnet.org
mayjesuschristbepraised.com
mercycenter.com
missionsanfranciscodelaespada.org
moorestownknights.org
mountaineercatholic.com
mountcarmelsaipan.com
mystpatricks.com
olgtemple.org
ourladyofmercyhillsboro.org
ourladyoftheplains.org
queenofangelschurch.org
saintandrewwright.org
saintantoninus.org
school.morecommunity.org
st-matthias.net
stadalbertschool.net
stambroselatham.com
stbasilvallejo.org
stbrendans.net
steustachiusparish.com
stfrancis-church.org
stjulianaccf.org
stlawrencementor.org
stmatthewhou.org
stpeterlindsay.org
strichards.com
stritaparish.net
sttitus.org
stwilliams.org
swsaints.org
thebasilica.org
uscatholicmission.org
www.actsamarillo.org
www.asagr.org
www.avosa.org
www.ciscoholyrosary.com
www.cmvic.net
www.ctkmandan.com
www.duluthcathmed.org
www.epiphanystl.org
www.ihrc.net
www.jesusloveshallreign.net
www.kjtnet.org
www.mayjesuschristbepraised.com
www.mercycenter.com
www.missionsanfranciscodelaespada.org
www.moorestownknights.org
www.mountaineercatholic.com
www.mountcarmelsaipan.com
www.mystpatricks.com
www.olgtemple.org
www.ourladyofmercyhillsboro.org
www.ourladyoftheplains.org
www.queenofangelschurch.org
www.saintandrewwright.org
www.saintantoninus.org
www.st-matthias.net
www.stadalbertschool.net
www.stambroselatham.com
www.stbasilvallejo.org
www.stbrendans.net
www.steustachiusparish.com
www.stfrancis-church.org
www.stjulianaccf.org
www.stlawrencementor.org
www.stmatthewhou.org
www.stpeterlindsay.org
www.strichards.com
www.stritaparish.net
www.sttitus.org
www.stwilliams.org
www.swsaints.org
www.thebasilica.org
www.uscatholicmission.org

Other certificates including the domain name holycrossaustin.org

(limited to 100 certificates)
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org

Certificate

The complete raw certificate details for holycrossaustin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINKDCCDBCgAwIBAgISBMU7Yqt1Wo3X2dRhflKcmomhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTAxNjU1MjRaFw0x
ODA4MDgxNjU1MjRaMB4xHDAaBgNVBAMTE2hvbHljcm9zc2F1c3Rpbi5vcmcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiER19jjj+Lrx9VTaK4hQs9AmG
mo9eSO03ROD3KgLhSamHdHiwP2cPCAByZkNq4OJaZDi8HZSRlYPauT0CfvuJr19j
rS/7kU9lJb8Ot7TGHugTGkRAsgL9Ch1BrMXke5GZeN97mWmz8Jqaj6nSAPgVKs7t
w68vmRQHUnlRdiRFrnxoutz4TVghNeHP3/gJnF+rsLmAnUolpbtecZN6I8T+Kaql
Y9tqoPk9aY7wVJ0wl2xk2b7pPm2o7uInK5Klp7s4c0mVCSBYC+RmvAUeApQ63cki
vrqnu25UPfnzmXTpbS4F+sQx6ZZ81/IsixlF8W8FnJuKG9WaExZzTuLiovtbAgMB
AAGjggoyMIIKLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPGN0dbFifPRybLBjoqx
Fv2IoGQAMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggczBgNVHREEggcqMIIHJoIQYWN0c2FtYXJpbGxvLm9yZ4IJYXNh
Z3Iub3JnghNjaXNjb2hvbHlyb3NhcnkuY29tggljbXZpYy5uZXSCDWN0a21hbmRh
bi5jb22CEWR1bHV0aGNhdGhtZWQub3Jngg9lcGlwaGFueXN0bC5vcmeCE2hvbHlj
cm9zc2F1c3Rpbi5vcmeCCGlocmMubmV0ghdqZXN1c2xvdmVzaGFsbHJlaWduLm5l
dIIKa2p0bmV0Lm9yZ4IbbWF5amVzdXNjaHJpc3RiZXByYWlzZWQuY29tgg9tZXJj
eWNlbnRlci5jb22CIW1pc3Npb25zYW5mcmFuY2lzY29kZWxhZXNwYWRhLm9yZ4IV
bW9vcmVzdG93bmtuaWdodHMub3Jnghdtb3VudGFpbmVlcmNhdGhvbGljLmNvbYIV
bW91bnRjYXJtZWxzYWlwYW4uY29tghBteXN0cGF0cmlja3MuY29tgg1vbGd0ZW1w
bGUub3JnghtvdXJsYWR5b2ZtZXJjeWhpbGxzYm9yby5vcmeCFm91cmxhZHlvZnRo
ZXBsYWlucy5vcmeCF3F1ZWVub2ZhbmdlbHNjaHVyY2gub3JnghVzYWludGFuZHJl
d3dyaWdodC5vcmeCEnNhaW50YW50b25pbnVzLm9yZ4IYc2Nob29sLm1vcmVjb21t
dW5pdHkub3Jngg9zdC1tYXR0aGlhcy5uZXSCFHN0YWRhbGJlcnRzY2hvb2wubmV0
ghNzdGFtYnJvc2VsYXRoYW0uY29tghJzdGJhc2lsdmFsbGVqby5vcmeCDnN0YnJl
bmRhbnMubmV0ghZzdGV1c3RhY2hpdXNwYXJpc2guY29tghRzdGZyYW5jaXMtY2h1
cmNoLm9yZ4IQc3RqdWxpYW5hY2NmLm9yZ4IUc3RsYXdyZW5jZW1lbnRvci5vcmeC
EHN0bWF0dGhld2hvdS5vcmeCEnN0cGV0ZXJsaW5kc2F5Lm9yZ4IOc3RyaWNoYXJk
cy5jb22CEHN0cml0YXBhcmlzaC5uZXSCC3N0dGl0dXMub3Jngg5zdHdpbGxpYW1z
Lm9yZ4IMc3dzYWludHMub3Jngg90aGViYXNpbGljYS5vcmeCFXVzY2F0aG9saWNt
aXNzaW9uLm9yZ4IUd3d3LmFjdHNhbWFyaWxsby5vcmeCDXd3dy5hc2Fnci5vcmeC
DXd3dy5hdm9zYS5vcmeCF3d3dy5jaXNjb2hvbHlyb3NhcnkuY29tgg13d3cuY212
aWMubmV0ghF3d3cuY3RrbWFuZGFuLmNvbYIVd3d3LmR1bHV0aGNhdGhtZWQub3Jn
ghN3d3cuZXBpcGhhbnlzdGwub3Jnggx3d3cuaWhyYy5uZXSCG3d3dy5qZXN1c2xv
dmVzaGFsbHJlaWduLm5ldIIOd3d3LmtqdG5ldC5vcmeCH3d3dy5tYXlqZXN1c2No
cmlzdGJlcHJhaXNlZC5jb22CE3d3dy5tZXJjeWNlbnRlci5jb22CJXd3dy5taXNz
aW9uc2FuZnJhbmNpc2NvZGVsYWVzcGFkYS5vcmeCGXd3dy5tb29yZXN0b3dua25p
Z2h0cy5vcmeCG3d3dy5tb3VudGFpbmVlcmNhdGhvbGljLmNvbYIZd3d3Lm1vdW50
Y2FybWVsc2FpcGFuLmNvbYIUd3d3Lm15c3RwYXRyaWNrcy5jb22CEXd3dy5vbGd0
ZW1wbGUub3Jngh93d3cub3VybGFkeW9mbWVyY3loaWxsc2Jvcm8ub3Jnghp3d3cu
b3VybGFkeW9mdGhlcGxhaW5zLm9yZ4Ibd3d3LnF1ZWVub2ZhbmdlbHNjaHVyY2gu
b3Jnghl3d3cuc2FpbnRhbmRyZXd3cmlnaHQub3JnghZ3d3cuc2FpbnRhbnRvbmlu
dXMub3JnghN3d3cuc3QtbWF0dGhpYXMubmV0ghh3d3cuc3RhZGFsYmVydHNjaG9v
bC5uZXSCF3d3dy5zdGFtYnJvc2VsYXRoYW0uY29tghZ3d3cuc3RiYXNpbHZhbGxl
am8ub3JnghJ3d3cuc3RicmVuZGFucy5uZXSCGnd3dy5zdGV1c3RhY2hpdXNwYXJp
c2guY29tghh3d3cuc3RmcmFuY2lzLWNodXJjaC5vcmeCFHd3dy5zdGp1bGlhbmFj
Y2Yub3Jnghh3d3cuc3RsYXdyZW5jZW1lbnRvci5vcmeCFHd3dy5zdG1hdHRoZXdo
b3Uub3JnghZ3d3cuc3RwZXRlcmxpbmRzYXkub3JnghJ3d3cuc3RyaWNoYXJkcy5j
b22CFHd3dy5zdHJpdGFwYXJpc2gubmV0gg93d3cuc3R0aXR1cy5vcmeCEnd3dy5z
dHdpbGxpYW1zLm9yZ4IQd3d3LnN3c2FpbnRzLm9yZ4ITd3d3LnRoZWJhc2lsaWNh
Lm9yZ4IZd3d3LnVzY2F0aG9saWNtaXNzaW9uLm9yZzCB/gYDVR0gBIH2MIHzMAgG
BmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlm
aWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVz
IGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9s
aWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkv
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhw
JQgXL6OqHQcT0wwAAAFjSzF7dwAABAMARzBFAiA920bUyjmccULLDJCRC7qi1YYx
IX6gn6CZmqsCx0aBDwIhAJbLI+JSwXgvZYBG5ZNetaUn3Mb0SyaEz/nBut6MLkZD
AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFjSzF7VQAABAMA
RzBFAiEA4mrupJ4PU9+BFpJe/6pLHoMunmlTVIec4RjiIrjF3lUCIDxpe0X61/fJ
1XtaJMPXqmn4PEAkTqVZQjHK+XGjfXIpMA0GCSqGSIb3DQEBCwUAA4IBAQCWIQiC
HtzZ+XN99iYmfuEq8DPYhS4Y9FP9vRpPCo1oL6qs5hNxJiBgGawqK0yLN9eUxUaG
8gpPUsrtTcVh4fsh2craOh3CJQUZ2EDxBCC/b2GfU1Cg8GrM2sRaIrhqDeUK3qs9
jrNSmaFJcX1lcxvt7Izcgmfo6BusViwLTVYG+9SZqoubg5XZDcUv0NrZXjEi2OVc
IuszCJZ64NfjWF3lvBHdNGqf9UFEko5x/9VkYHwARzWAfXH1FYB6nqsYdE7jHcSd
DUUlQ/Of8AEWGt3LSvyusV0KBWrCbSLYpPKrBwAyVBEC+EAiRlueMlTv8LGtQcwS
d6w3zyThw7CJmYYk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohEdfY44/i68fVU2iuIU
LPQJhpqPXkjtN0Tg9yoC4Umph3R4sD9nDwgAcmZDauDiWmQ4vB2UkZWD2rk9An77
ia9fY60v+5FPZSW/Dre0xh7oExpEQLIC/QodQazF5HuRmXjfe5lps/Camo+p0gD4
FSrO7cOvL5kUB1J5UXYkRa58aLrc+E1YITXhz9/4CZxfq7C5gJ1KJaW7XnGTeiPE
/imqpWPbaqD5PWmO8FSdMJdsZNm+6T5tqO7iJyuSpae7OHNJlQkgWAvkZrwFHgKU
Ot3JIr66p7tuVD3585l06W0uBfrEMemWfNfyLIsZRfFvBZybihvVmhMWc07i4qL7
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415563706784899072705745413924580021143969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 16:55:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 16:55:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holycrossaustin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20459045222735888394270010735566410383643260944603321060616444998949481194929781146982429621132964594571129016958414715648191242411067707758051204551075697353634450414423361824363309524039599523986733300900435938416674543398806561107055828281892024596149255903841271037309377239933632109857592104284266154354806483446238697710341336163881335246962690260326386739038291584657227252109881457329123547790288036264627114865467084240872608251054391054167859124686023173743198551624517143822760840380823870836841258157884627750242137492652967708767682757926236533746557099930064691578219451855145612688728459765161650223963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f18dd1d6c589f3d1c9b2c18e8ab116fd88a06400
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.morecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscatholicmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscatholicmission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001634b317b77000004030047304502203ddb46d4ca399c7142cb0c90910bbaa2d58631217ea09fa0999aab02c746810f02210096cb23e252c1782f658046e5935eb5a527dcc6f44b2684cff9c1bade8c2e4643007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634b317b550000040300473045022100e26aeea49e0f53df8116925effaa4b1e832e9e695354879ce118e222b8c5de5502203c697b45fad7f7c9d57b5a24c3d7aa69f83c40244ea5594231caf971a37d7229
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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