www.nsucatholic.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:0e:f7:ba:0e:ad:f5:11:fe:3f:df:4f:f7:0d:d1:a5:b9 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nsucatholic.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:0e:f7:ba:0e:ad:f5:11:fe:3f:df:4f:f7:0d:d1:a5:b9
Serial Number (int): 300489225454144927895710282243997015582137
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:85:0e:52:11:76:3d:08:13:66:a2:c8:fa:20:8b:b3:24:10:18:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:ee:0a:25:3d:af:63:af:b8:3a:66:4c:3d:af:ca:86:0a:48:b4:ee
Fingerprint (sha256): 35:92:ca:f9:84:22:52:77:35:57:02:74:34:b9:67:ce:61:9f:cf:00:62:72:d8:de:1d:f3:21:b5:5e:ff:2c:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nsucatholic.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nsucatholic.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

16jda.com
angelsinavenue.org
bismarckfertilitycare.com
cfook.org
church.stfrancisxavier.com
cpswc.org
fcjcoh.net
holyfamilyaston.org
holyfamilyfranklinton.org
holyfamilytopeka.net
holynativitypayson.org
holyrosarywea.org
icuctn.org
lambtoncatholic.ca
lightofchristacademy.org
lumenchristiparish.org
nsucatholic.org
ourladylebanon.com
portocharities.org
qhrwea.church
ramann.art
sacbstx.org
sacredheartnorco.org
saintanthonysnm.org
saldelatierrat.com
sbdallas.org
school.stfrancisxavier.com
smdpchurch.org
stagnesofbohemia.org
stanncass.com
stanncatholicschool.com
stannlafayette.org
staugustinehighland.org
stclarehouston.org
stedwardbowie.com
stjoachimpittsville.com
stjosephdg.org
stjosephscatholicchurch-manor.org
stjudebmt.org
stjudechalfont.org
stmartindeporreschurch.org
stpaulakron.org
stpaulparishakron.org
stpeterswaldorf.org
svdpsmg.org
www.16jda.com
www.angelsinavenue.org
www.bismarckfertilitycare.com
www.cfook.org
www.cpswc.org
www.fcjcoh.net
www.holyfamilyaston.org
www.holyfamilyfranklinton.org
www.holyfamilytopeka.net
www.holynativitypayson.org
www.holyrosarywea.org
www.icuctn.org
www.lambtoncatholic.ca
www.lightofchristacademy.org
www.lumenchristiparish.org
www.nsucatholic.org
www.ourladyguadalupefw.org
www.ourladylebanon.com
www.portocharities.org
www.qhrwea.church
www.ramann.art
www.sacbstx.org
www.sacredheartnorco.org
www.saintanthonysnm.org
www.saldelatierrat.com
www.sbdallas.org
www.smdpchurch.org
www.stagnesofbohemia.org
www.stanncass.com
www.stanncatholicschool.com
www.stannlafayette.org
www.staugustinehighland.org
www.stclarehouston.org
www.stedwardbowie.com
www.stjoachimpittsville.com
www.stjosephdg.org
www.stjosephscatholicchurch-manor.org
www.stjudebmt.org
www.stjudechalfont.org
www.stmartindeporreschurch.org
www.stpaulakron.org
www.stpaulparishakron.org
www.stpeterswaldorf.org
www.svdpsmg.org

Other certificates including the domain name nsucatholic.org

(limited to 100 certificates)
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org

Certificate

The complete raw certificate details for www.nsucatholic.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUakpeHRgNvFud+oEYrl
R51xmmCYuGqrfAPd0fdgUck2wmHSaxkHvi4OABS9Lmm+/4EHQtyo5/TIhBPIkfFf
Kb3Uatj3B8yiEYPmo6wK1qKGByBmrvLAjUZDr2Jf9SpAMVGtqkl0Hk/dC8PLOsRd
4PtChlyPJ7orJyz81dBMY9pAPTbmy97SsqTN2l2udSinsQRYIxs3wOyQhn5/1O+e
ZkEeF+mjQQOcBlWxQJKWRzWOXN8LXeL047Zw9LnX4hNogVeZeKTGkTgvDpPjjbF0
HjbjxXMhA8zxmDzxflktySAaYb+bWulF9VX6kKAT119XiVf1g5o9513JLTv+bAQk
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300489225454144927895710282243997015582137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 05:28:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 05:28:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nsucatholic.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23388921857357928732791229505484434961095876425559340741773701427597068079663799037150191754721961320303562709993424500057950506447514834913295007728668848501569677521075326496297531073691852318201826673966498053388186540174406806314774725460842246226357064710060177101949100582333825741098081235261813562441387421566360038425398703307352253930258628367508441514528167006842989383317140167820231846480886696229580982943303175074511413836326527804109261045443919603982390879034157999054219396544392515763737740810374965745155704306084385258853032986493818925716131600532713912228294016108631866894160012731145829753931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0850e5211763d081366a2c8fa208bb3241018d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarywea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhrwea.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdpsmg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarywea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyguadalupefw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qhrwea.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdpsmg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001676d9af4a9000004030046304402204c6abc617a834c6beea12c2f6ef51afe6fcf0a69ea1ff67bf3d06670fd376fd602203ef84378a620a75ddf320bc035233c591ea98039d775ef90c370ce1e715dbe22007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001676d9af4480000040300463044022041b389cba147d3f97faa6af18d9656cb40b7f74e10f421dccd8a9034f7312f0502202b59aea0c006eede28112e0a5e15ae800bdea64aef680a8d12506fc4a978da10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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