www.sthelenslangside.org.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b6:14:33:de:7a:88:8d:ed:ff:4d:75:9e:5b:88:3c:f8:f1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sthelenslangside.org.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:14:33:de:7a:88:8d:ed:ff:4d:75:9e:5b:88:3c:f8:f1
Serial Number (int): 410407388386110299911694617374324223178993
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:9f:e9:03:1e:d3:94:43:ba:99:7e:03:4b:2c:e5:32:cf:39:10:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:30:4c:13:d5:57:e9:58:94:37:45:f5:62:45:d4:ca:b1:61:5d:b9
Fingerprint (sha256): 2f:1c:15:17:30:bd:d5:77:84:69:f9:d3:66:4c:fb:d0:ae:f3:0d:d1:7b:89:eb:b2:6f:d4:3b:7e:f9:65:a2:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sthelenslangside.org.uk

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sthelenslangside.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baylorcatholic.org
caritaswealth.com
catholicfoundationlubbock.org
corpuschristi-detroit.org
ctkcathedral.org
friendsofthecathedral.org
hfwharton.org
holyfamily-vanalstyne.org
holyfamilytym.com
holyfamilyvb.org
johnmichaeltalbot.com
olgcchurch.org
olpssulphur.com
olqh.org
pophouston.org
radiosantisimosacramento.com
sacredheartsusanville.org
saintlouislifeteen.org
saintmarymagdenver.org
sainttheresahalecenter.us
sbscrusaders.com
school.stanne-tomball.org
sfacatholic.net
sscmchurch.org
ssppvirgil.org
st-mm.com
stcatherine.info
stcolumbacatholic.net
stcolumban.org
stelizabethofhungaryalice.org
stgabriel.org
stgerardssm.ca
sthelenslangside.org.uk
stjoachim.org
stjohnchurchterrell.org
stleosminot.org
stmargaret-homer.org
stmarys-waco.org
stmarysnorton.com
stpatrickdallas.org
stpeter.ptdiocese.org
stpiusxsa.org
stromualdschool.org
stthomasfreeport.org
uttylercatholic.org
www.baylorcatholic.org
www.caritaswealth.com
www.catholicfoundationlubbock.org
www.corpuschristi-detroit.org
www.ctkcathedral.org
www.friendsofthecathedral.org
www.hfwharton.org
www.holyfamily-vanalstyne.org
www.holyfamilytym.com
www.holyfamilyvb.org
www.johnmichaeltalbot.com
www.olgcchurch.org
www.olpssulphur.com
www.olqh.org
www.pophouston.org
www.radiosantisimosacramento.com
www.sacredheartsusanville.org
www.saintlouislifeteen.org
www.saintmarymagdenver.org
www.sainttheresahalecenter.us
www.sbscrusaders.com
www.sfacatholic.net
www.sscmchurch.org
www.ssppvirgil.org
www.st-mm.com
www.stcatherine.info
www.stcolumbacatholic.net
www.stcolumban.org
www.stelizabethofhungaryalice.org
www.stgabriel.org
www.stgerardssm.ca
www.sthelenslangside.org.uk
www.stjoachim.org
www.stjohnchurchterrell.org
www.stleosminot.org
www.stmargaret-homer.org
www.stmarkdenton.org
www.stmarys-waco.org
www.stmarysnorton.com
www.stpatrickdallas.org
www.stpeter.ptdiocese.org
www.stpiusxsa.org
www.stromualdschool.org
www.stthomasfreeport.org
www.uttylercatholic.org

Other certificates including the domain name sthelenslangside.org.uk

(limited to 100 certificates)
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.transfiguration-tarrytown.org
sthelenslangside.org.uk
www.transfiguration-tarrytown.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.sthelenslangside.org.uk
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
sthelenslangside.org.uk
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.asjb.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sthelenslangside.org.uk
www.transfiguration-tarrytown.org
www.sthelenslangside.org.uk
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
www.asjb.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org
www.asjb.org
www.transfiguration-tarrytown.org
www.transfiguration-tarrytown.org
www.sthelenslangside.org.uk
www.asjb.org
www.transfiguration-tarrytown.org
www.asjb.org
www.asjb.org

Certificate

The complete raw certificate details for www.sthelenslangside.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DfTZK8YfEGIUBDlBsGo
xte660R2hlS/ZfrxAtzgl8j00WZh/qBk+l5C1Qg9Vf7kKeMbl+9IXKITPGHg5E3v
NxMpG0iAST6Uljws4zx66TH59eDjM3HNFq61G6YqETmrZZycD1nYLTu5TTv8ETHb
g9s4Ij74hOFkMBChxM29uf4A2bydE/Utq+VN6Xux8OkPRUfGmMLDNEv1kZ/3GTrW
pbnCBvMa7nSQSVqRuXNjkJeKPF4urCCD2CgpKBPRhYl8ebsGUbz5t4FuGQQN9a78
yNyut5XQZC45+FuOwMhbwmZ1672Y5po+xEZMhdF19YcC5sUj9sOW8w34e8lKKQT1
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410407388386110299911694617374324223178993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-26 11:54:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-25 11:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sthelenslangside.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27295002578500338135856333503788856085352597748737371739039394030796706751250000424802659255679270885059948578043893196290799919149436416286593983199190589622394846335809542389357586513879488445001350369053873369888291906626906948229040319311783297301327856306253619034655543328773344858445225025127526143085288682370134761960986161044056768702621676036887832662387516736948597134074797297885618381421328097055660740103728244510394967506560692760119143033670154600779021890697977640063036812514085816355453514125208006606623104259876551020747301705244863931566617856879071184378177538567741567197210775716601669154067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab9fe9031ed39443ba997e034b2ce532cf39109c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baylorcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caritaswealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpssulphur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosantisimosacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouislifeteen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarymagdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainttheresahalecenter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stanne-tomball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssppvirgil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumban.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stelizabethofhungaryalice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgerardssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchurchterrell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleosminot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarys-waco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeter.ptdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stthomasfreeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uttylercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylorcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caritaswealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationlubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristi-detroit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkcathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsofthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfwharton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamily-vanalstyne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyvb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnmichaeltalbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgcchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpssulphur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olqh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosantisimosacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartsusanville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlouislifeteen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarymagdenver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainttheresahalecenter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sscmchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssppvirgil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherine.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbacatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumban.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stelizabethofhungaryalice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgabriel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgerardssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenslangside.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchurchterrell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleosminot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmargaret-homer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkdenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarys-waco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysnorton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeter.ptdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpiusxsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stromualdschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stthomasfreeport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uttylercatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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