www.cwiaholyspirit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:6c:4f:e6:87:30:01:6d:0d:3f:7e:11:9d:cb:82:e6:7f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cwiaholyspirit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:6c:4f:e6:87:30:01:6d:0d:3f:7e:11:9d:cb:82:e6:7f
Serial Number (int): 332259561605497403289599338605440682616447
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:4e:e2:16:ca:df:a5:5b:f9:44:70:94:3e:ef:56:c8:d4:07:bb:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:97:0c:0e:a9:2c:d2:eb:d4:c6:9c:77:8d:3b:c8:b1:e0:5e:28:d4
Fingerprint (sha256): 45:be:2b:ea:59:7c:b3:8a:94:05:bd:a9:5d:86:aa:c2:0e:1c:52:73:df:2d:a5:a3:8e:df:d2:22:22:61:8b:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cwiaholyspirit.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwiaholyspirit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org

Other certificates including the domain name cwiaholyspirit.org

(limited to 100 certificates)
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org

Certificate

The complete raw certificate details for www.cwiaholyspirit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINKTCCDBGgAwIBAgISA9BsT+aHMAFtDT9+EZ3LguZ/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDQwNTQxNTZaFw0x
OTA3MDMwNTQxNTZaMCExHzAdBgNVBAMTFnd3dy5jd2lhaG9seXNwaXJpdC5vcmcw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0P/YiED07XCTlHbIAzWY
Soakl0MwQtaHQy5pvNJBgF1PJK73iU3kVRMvQcch6bGGJDEsI2zwvmQourPAN8Wo
cG+yY+DadQz19qRxzoSHd8kdQlJeGZp/QWwHTFJIT1dsNbq0K1bQ231cmBg7FLZ1
Neh1Abc5Ivq3LhxgS+N4kPwWtCwOWwj/9Wfj8rdSNJqSNBAFwmCpjCzQhNuzFD64
ZNiWg63EgJ9cuD5Qm6C0JUKGEbxrWxDjmm1HAB8QG29lk/2hc1iwPELBSUndAapv
LU/OuPBLs2i+DLt2GWdHx2v37vV6LuAmDU64SodakCpdX4pdfsRnvaruDViOiqd5
AgMBAAGjggowMIIKLDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDNO4hbK36Vb+URw
lD7vVsjUB7tlMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggfjBgNVHREEggfaMIIH1oIUYWxsc2FpbnRzaGF5d2FyZC5v
cmeCFmFsbHNhaW50c2tub3h2aWxsZS5vcmeCGmFzc3VtcHRpb25idm13ZXN0Z3Jv
dmUub3JnghFjYXRob2xpY2FyZ29zLmNvbYIZY2F0aG9saWNmb3VuZGF0aW9uZG9i
LmNvbYIJY3RyY2MuY29tgg1jdHJzY2hvb2wuY29tggxjdHJ5b3V0aC5jb22CEmN3
aWFob2x5c3Bpcml0Lm9yZ4IRY3d0cmNhdGhvbGljcy5vcmeCFWRpdmluZW1lcmN5
ZGVudG9uLmNvbYIUZXBpcGhhbnljYXRob2xpYy5vcmeCGmhvbHlyb3Nhcnlub3J0
aG1hbmthdG8uY29tggprYzU4MDMub3JnggpudHhjbWMub3JnghRvbGdvb2Rjb3Vu
c2Vsc3NtLmNvbYINb2xsbm92YXRvLm9yZ4IScmFpZGVyY2F0aG9saWMub3JnghNy
b2NrbGluY2F0aG9saWMub3JnghVzYWludGFubmViZWxsdmlldy5vcmeCD3NhaW50
YmFydGhzLm9yZ4Ibc2FpbnRqb2hucGF1bGlpLWtld2FuZWUub3Jngg1zYWludHBh
dHMubmV0ghFzYW5qb3NlY2h1cmNoLm9yZ4IKc2F0YXBzLmNvbYIUc2pjYXRob2xp
Y2NodXJjaC5vcmeCDHNscGFyaXNoLm9yZ4IRc3NmcmFuY2lzam9obi5vcmeCDHN0
YXVzdGluLm9yZ4Ibc3RqYW1lc3NjaG9vbC5wdnQuazEyLmlhLnVzghZzdGpvaG5z
Y2hvb2xvbmxpbmUub3JnghRzdGpvc2VwaG1hcnNoYWxsLm9yZ4IKc3RsdWNpZS5j
Y4IOc3RtYXJ0aW5kcC5vcmeCDHN0bWFyeWNoLmNvbYITc3RtYXJ5c2JsdWZmdG9u
Lm9yZ4IXc3RtYXJ5c2lsb2Ftc3ByaW5ncy5jb22CFXN0bWFyeXNyaWRnZWZpZWxk
Lm9yZ4Ifc3RtYXJ5c3Rhcm9mdGhlc2VhYmFsbGluZ2VyLm9yZ4IUc3RtaWNoYWVs
Z2FybGFuZC5vcmeCGXN0cGF0c2JlbGZhc3RmaWxsbW9yZS5vcmeCFHN0cGV0ZXJj
aGVzYW5pbmcub3JnghZzdHBldGVyY2hpbGxpY290aGUuY29tghZ2aXNpdGF0aW9u
Y2F0aG9saWMuY29tgg93bHBjYXRob2xpYy5vcmeCGHd3dy5hbGxzYWludHNoYXl3
YXJkLm9yZ4Iad3d3LmFsbHNhaW50c2tub3h2aWxsZS5vcmeCHnd3dy5hc3N1bXB0
aW9uYnZtd2VzdGdyb3ZlLm9yZ4IVd3d3LmNhdGhvbGljYXJnb3MuY29tgh13d3cu
Y2F0aG9saWNmb3VuZGF0aW9uZG9iLmNvbYINd3d3LmN0cmNjLmNvbYIRd3d3LmN0
cnNjaG9vbC5jb22CEHd3dy5jdHJ5b3V0aC5jb22CFnd3dy5jd2lhaG9seXNwaXJp
dC5vcmeCFXd3dy5jd3RyY2F0aG9saWNzLm9yZ4IZd3d3LmRpdmluZW1lcmN5ZGVu
dG9uLmNvbYIYd3d3LmVwaXBoYW55Y2F0aG9saWMub3Jngh53d3cuaG9seXJvc2Fy
eW5vcnRobWFua2F0by5jb22CDnd3dy5rYzU4MDMub3Jngg53d3cubnR4Y21jLm9y
Z4IYd3d3Lm9sZ29vZGNvdW5zZWxzc20uY29tghF3d3cub2xsbm92YXRvLm9yZ4IW
d3d3LnJhaWRlcmNhdGhvbGljLm9yZ4IXd3d3LnJvY2tsaW5jYXRob2xpYy5vcmeC
GXd3dy5zYWludGFubmViZWxsdmlldy5vcmeCE3d3dy5zYWludGJhcnRocy5vcmeC
H3d3dy5zYWludGpvaG5wYXVsaWkta2V3YW5lZS5vcmeCEXd3dy5zYWludHBhdHMu
bmV0ghV3d3cuc2Fuam9zZWNodXJjaC5vcmeCDnd3dy5zYXRhcHMuY29tghh3d3cu
c2pjYXRob2xpY2NodXJjaC5vcmeCEHd3dy5zbHBhcmlzaC5vcmeCFXd3dy5zc2Zy
YW5jaXNqb2huLm9yZ4IQd3d3LnN0YXVzdGluLm9yZ4Ifd3d3LnN0amFtZXNzY2hv
b2wucHZ0LmsxMi5pYS51c4Iad3d3LnN0am9obnNjaG9vbG9ubGluZS5vcmeCGHd3
dy5zdGpvc2VwaG1hcnNoYWxsLm9yZ4IOd3d3LnN0bHVjaWUuY2OCEnd3dy5zdG1h
cnRpbmRwLm9yZ4IQd3d3LnN0bWFyeWNoLmNvbYIXd3d3LnN0bWFyeXNibHVmZnRv
bi5vcmeCG3d3dy5zdG1hcnlzaWxvYW1zcHJpbmdzLmNvbYIZd3d3LnN0bWFyeXNy
aWRnZWZpZWxkLm9yZ4Ijd3d3LnN0bWFyeXN0YXJvZnRoZXNlYWJhbGxpbmdlci5v
cmeCGHd3dy5zdG1pY2hhZWxnYXJsYW5kLm9yZ4Idd3d3LnN0cGF0c2JlbGZhc3Rm
aWxsbW9yZS5vcmeCGHd3dy5zdHBldGVyY2hlc2FuaW5nLm9yZ4Iad3d3LnN0cGV0
ZXJjaGlsbGljb3RoZS5jb22CGnd3dy52aXNpdGF0aW9uY2F0aG9saWMuY29tghN3
d3cud2xwY2F0aG9saWMub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5C
IAjGNzV55hB7zFYAAAFp5xUoBAAABAMARzBFAiBic52AZf+ZBi7XgBdeihAN/KDl
Jde2d+c6xqQncSjm8wIhANZpfGl3rQWurpkYu2bUxi/vxEhCxzgjFNaBy5GSfUGE
AHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFp5xUmggAABAMA
SDBGAiEAuoF0BYZYQRJzT8RldF47694kckRW+jOjXzQ2yXzGmlsCIQDApyIX2zpg
6/JNkKQU5gyOSF3yXTnfZZTuDZ4uf8PugDANBgkqhkiG9w0BAQsFAAOCAQEAGR5n
q66Sqz3y6Yp5r2FdxuaHDQ3KS6CM8Y01EALY8IzH0DN/aaknWwzP8r0BDeagXTqc
T9NY3dDQZ3JFAx4n/CPlnsurIZFonlEtbNrZjdVtdS5vj2dKborTZtBtHhTeSIj9
J2rGyZH9SalpYvfThXa5QVjpliq2PwnFWxa8OBG86iEqLKwIS4hUETMbQQULlJUF
+01P+QwjNaWA5deTdXCl4RpEFC7HcnPiVf21RLDHwzm9Eqxi9knGGSFpwVjMl4aL
kzZXfMAdlW8bmJkx2DCeOfC1W9f2WaN7WvDyYH/qTH1k8NPl/V9G6H5qE+96VPRn
HkNieXZaM9xKS2Ukpw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtD/2IhA9O1wk5R2yAM1
mEqGpJdDMELWh0MuabzSQYBdTySu94lN5FUTL0HHIemxhiQxLCNs8L5kKLqzwDfF
qHBvsmPg2nUM9fakcc6Eh3fJHUJSXhmaf0FsB0xSSE9XbDW6tCtW0Nt9XJgYOxS2
dTXodQG3OSL6ty4cYEvjeJD8FrQsDlsI//Vn4/K3UjSakjQQBcJgqYws0ITbsxQ+
uGTYloOtxICfXLg+UJugtCVChhG8a1sQ45ptRwAfEBtvZZP9oXNYsDxCwUlJ3QGq
by1PzrjwS7Novgy7dhlnR8dr9+71ei7gJg1OuEqHWpAqXV+KXX7EZ72q7g1Yjoqn
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332259561605497403289599338605440682616447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 05:41:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 05:41:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwiaholyspirit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25098245827472520236555000856849443084186584629499456974050352981599516928052522694857440722518243975006350041251480088430409229252894268473498149289098841313937727544003574126241819769842008564178373642244152148034476114874800935856666622821671696589734216452260711066751420578688543479049746384265627266760084215509165235909825070828567883982905807433296331460856183009874301781302533089459564366038239346932991867011373529294341642023639033041833720057268011149781120150612943412761923488469205750150574208728722450906427305735181047190825748822358735678082385892595422704846347017123223336920667520528953186625401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							334ee216cadfa55bf94470943eef56c8d407bb65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169e71528040000040300473045022062739d8065ff99062ed780175e8a100dfca0e525d7b677e73ac6a4277128e6f3022100d6697c6977ad05aeae9918bb66d4c62fefc44842c7382314d681cb91927d418400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169e71526820000040300483046022100ba81740586584112734fc465745e3bebde24724456fa33a35f3436c97cc69a5b022100c0a72217db3a60ebf24d90a414e60c8e485df25d39df6594ee0d9e2e7fc3ee80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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