www.ourladyofthelakehalifax.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:fe:95:5e:56:e2:ae:94:9f:cf:89:c0:8e:7b:cd:17:cf was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ourladyofthelakehalifax.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:fe:95:5e:56:e2:ae:94:9f:cf:89:c0:8e:7b:cd:17:cf
Serial Number (int): 290258976093231140578483599852408543188943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:e2:4d:d6:ca:91:07:f2:21:76:df:27:41:c7:83:c2:83:0b:39:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:15:7a:61:4f:1f:5e:5b:99:4c:e0:95:6b:d2:26:19:51:72:24:96
Fingerprint (sha256): 40:45:5e:a7:c9:7e:b0:f4:71:6d:92:5d:b7:45:d4:5a:3f:cf:d3:23:6c:05:30:9f:3f:9c:9c:89:3e:92:cf:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ourladyofthelakehalifax.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ourladyofthelakehalifax.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

armorofgodradio.com
attackabv.com
bensisnj.com
blessedsacramentwv.org
cathedralofstpeter.org
christtheteacher.org
churchofsaintann.net
encounteringchristcampaign.org
fatimabq.org
guadalupehobbs.com
hfglendale.org
holyangelscc.com
ics-newmadrid.com
johnpaul2foundationofmichigan.com
mancoichicago.org
nsucatholics.org
olph.dionet.org
olvnj.com
ourladyofthelakehalifax.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintacc.com
saintannehamel.org
santaclaracatholicchurch.org
school.stambroselatham.com
scswf.org
smsangels.org
southeastrochestercatholics.org
stannstmary.org
stanthonybelleville.com
stcatherineslc.org
stgmbne.com
sthelenorangefield.org
stipend.stambroselatham.com
stjohnmany.org
stjosephatkinson.org
stjosephedinburg.org
stlawrencegoffstown.org
stmarkindy.org
stmarydelavan.org
stmarygilberts.com
stmarygreenville.org
stmarygreenvilleschool.org
stmaryorange.online
stmaryscanaseraga.org
stpatmadras.com
stpeterthefisherman.me
stphilipspetrolia.ca
williamstowncatholics.org
www.armorofgodradio.com
www.attackabv.com
www.bensisnj.com
www.blessedsacramentwv.org
www.cathedralofstpeter.org
www.christtheteacher.org
www.churchofsaintann.net
www.encounteringchristcampaign.org
www.fatimabq.org
www.guadalupehobbs.com
www.hfglendale.org
www.holyangelscc.com
www.holycrossaustin.org
www.ics-newmadrid.com
www.johnpaul2foundationofmichigan.com
www.mancoichicago.org
www.nsucatholics.org
www.olph.dionet.org
www.olvnj.com
www.ourladyofthelakehalifax.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintacc.com
www.saintannehamel.org
www.santaclaracatholicchurch.org
www.scswf.org
www.smsangels.org
www.southeastrochestercatholics.org
www.stannstmary.org
www.stanthonybelleville.com
www.stcatherineslc.org
www.stgmbne.com
www.sthelenorangefield.org
www.stjohnmany.org
www.stjosephatkinson.org
www.stlawrencegoffstown.org
www.stmarkindy.org
www.stmarydelavan.org
www.stmarygilberts.com
www.stmarygreenville.org
www.stmarygreenvilleschool.org
www.stmaryorange.online
www.stmaryscanaseraga.org
www.stpatmadras.com
www.stpeterthefisherman.me
www.stphilipspetrolia.ca
www.williamstowncatholics.org

Other certificates including the domain name ourladyofthelakehalifax.org

(limited to 100 certificates)
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org

Certificate

The complete raw certificate details for www.ourladyofthelakehalifax.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApglCaEi8LVi2lf4RyXNi
5Gt0rZe/wP6L95qDfA8fUPP+sudwCANEP//0BLEWKSCYmn/JBrv4fPJzb5Hwu/0j
wOi5fTd9F3e/cUMzUMuYOElVzUm0OuMlacejVOgp8ciXDZSZAY1pSBohugwW7xGg
aAYbosUPSCUnQ3AELqapbi2g36luTJN4k7iYXaKm96aNYhyjiEKstxQDqXWFSN8l
ly9yqB4tAlX7wKg6k8gxJOI8IFinllQ3YMu9GTkVz1UA/4jGY85e2x8JrUsoCtzn
NeiW3XmWIacwFvfNsKKaacbKicSOvxpezEFRJBdIhciXIIWsfAMTJ6NEUS1GCmnT
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290258976093231140578483599852408543188943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 05:28:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 05:28:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ourladyofthelakehalifax.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20960124606531051326025063928708304320226676639845693400371976130152676224569885371572258213131637309588806502297610840206049682159042150439742894094620577369538754264759325192050370751805921439559693108909138771557076173594735592766388813212449940532702233028545290171348783674254779254086162236522917320720483859073317236986298120458335367599860437505652142345917826140178486253194758435323047028010903990856998570958104808944078651874348339042431654751710571610449282647592667532774383920261631484975173837479289405051071300141230283723562105916945835891652190200296506137634472230885815545975071687956463188824997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5e24dd6ca9107f22176df2741c783c2830b3948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stipend.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephedinburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamstowncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamstowncatholics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001687965124d0000040300483046022100c232968025e19b8ed19a1a6367e505828a18a081dc9113402998d47621647722022100a3cf34b23d2c8fd62131de74f3256e5e16eadd1d444498241868a2441bf5701400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168796514440000040300473045022071d400613c6d1bc5eab781daf3b765d9b959d8ce52413e7d489ccf856a03c0dc022100e428af5912fa1a63a75193165b4ec7b9bb2ef8fcd0342cb97e4a3d63cb89bb94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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