www.stmaryelyria.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:00:6c:cc:f5:38:b5:07:ca:c7:3e:86:c7:6d:d1:ea:3f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stmaryelyria.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:00:6c:cc:f5:38:b5:07:ca:c7:3e:86:c7:6d:d1:ea:3f
Serial Number (int): 287198882606372793898328089477232714705471
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:92:75:ed:52:5c:c8:bc:67:b6:54:c1:9f:d0:9d:cd:9d:51:f0:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:f6:63:eb:04:4b:6a:86:07:d5:88:eb:55:ce:39:d8:d6:98:f2:ab
Fingerprint (sha256): 3b:6d:75:4f:9a:b6:a6:dc:8f:a3:6d:9a:86:57:fd:33:9b:97:b6:53:b5:64:bb:e6:83:64:4c:45:64:40:b1:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stmaryelyria.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stmaryelyria.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggielandhomeschool.com
catholic.tulane.edu
catholicdos.org
charityguildshop.org
easbothell.org
gssfrankfort.org
heargodscall.com
hfnb.org
holytrinityrcparish.org
icgrandprairie.org
insidethewalls.org
olmcorange.com
olmnh.org
parish.holyfamilyportland.org
popabq.org
sacredheartofjesusonline.org
saint-albert.org
saintlawrencemartyr.org
saintmartindetours.org
saintmarymosj.com
saintsppta.org
sanjuandiegodallas.org
school.holyfamilyportland.org
sesjchurch.com
shcstx.com
shparish.org
sjcparish.org
st-marys.pvt.k12.ia.us
stanthonyrak.org
stcolumbaonline.org
stedwardsparish.org
stfrancissherwoodschool.org
stjamesgrafton.com
stjohnbosco.com
stjohnch.org
stjosephch.org
stjosephscharlton.com
stjparish.com
stlukedanvilleoh.org
stmaryelyria.org
stmaryrush.org
stmarysamarillo.com
stmarysbismarck.org
stpatrickottumwa.com
stvincentpampa.com
tccelementary.org
www.aggielandhomeschool.com
www.catholic.tulane.edu
www.catholicdos.org
www.charityguildshop.org
www.easbothell.org
www.gssfrankfort.org
www.heargodscall.com
www.hfnb.org
www.holytrinityrcparish.org
www.icgrandprairie.org
www.insidethewalls.org
www.olmcorange.com
www.olmnh.org
www.popabq.org
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintlawrencemartyr.org
www.saintmartindetours.org
www.saintmarymosj.com
www.saintsppta.org
www.sanjuandiegodallas.org
www.sesjchurch.com
www.shcstx.com
www.shparish.org
www.sjcparish.org
www.st-marys.pvt.k12.ia.us
www.stanthonyrak.org
www.stcolumbaonline.org
www.stedwardsparish.org
www.stfrancissherwoodschool.org
www.stjamesgrafton.com
www.stjohnbosco.com
www.stjohnch.org
www.stjosephch.org
www.stjosephscharlton.com
www.stjparish.com
www.stlukedanvilleoh.org
www.stmaryelyria.org
www.stmaryrush.org
www.stmarysamarillo.com
www.stmarysbismarck.org
www.stpatrickottumwa.com
www.stvincentpampa.com
www.tccelementary.org

Other certificates including the domain name stmaryelyria.org

(limited to 100 certificates)
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org

Certificate

The complete raw certificate details for www.stmaryelyria.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb8aLjceERyhfsREYSCF
DF2sPQIteh9Cg4tV3/rukrj9Rtqnjmy2sHdcLM8nP7pRcB31orHaPjjtPvNRXXqx
JuFJoEC23w+7yIIwMMXpumMMM75IOgrZqfzPcCNOOZCyg3Yz8k9rspv0FA/vNOrS
ZZylqHb0XEhGNKjPEfVK9r6XKTugc/pO2M5RGlqOVJJZp816X0QLXng5vCIbim1A
ALdsVbGlSrpyOXQtriuIot5X9Q0UCgMz9APZsO/yILYvAl+pppZA70Tf8w4bYpyh
iBobZ31oZ5GNkqM0fSC95gndOp2iVDkGkwILXoK5xvScAy4luA7uq5btgizrdee1
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287198882606372793898328089477232714705471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 05:29:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 05:29:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stmaryelyria.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21933462799551185167913808135365527186021957333649223443895609282336182312808390733560119378016812510399409679629507741396490978059411295376711682629392473797263678207814469749163139040991939513197146681938318127907196014187014017454890538749313906537183801982608665327524411432917135613096456316384019383148337003441056753144855982660033849019445009105769674803400568643147110828055148422550856079282918975317714210342106180485860374218971128651427670072844730598732638025839182582841854082578080901881276533935980094165396552781678427140357898071169946271298069294825267226145202252953293289787914777599069647254851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							019275ed525cc8bc67b654c19fd09dcd9d51f008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccelementary.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aba2eb96d000004030047304502204ad9be40d92e0b87e014df352fb6e7564eaad20e0d33fc5c387d97fa943afea7022100b8b782a66c26fd1f19569739aae71cabb5d19d2d91efa67f463b671dcdc58dd400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aba2eb990000004030047304502200b1bf48e10bf26a90e13e41b4814805a3820cef7cf68065389152d9bf417c40a02210092fd8f7ac5c03c3872beb9129d576ce556cd80181f5c2e70758d253acdd00c5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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