www.cwiaholyspirit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:8b:86:32:44:b6:86:c8:97:21:53:e3:c9:41:f0:c2:b7 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cwiaholyspirit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:8b:86:32:44:b6:86:c8:97:21:53:e3:c9:41:f0:c2:b7
Serial Number (int): 294529706865369402317716853455446497870519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:12:eb:b5:41:6a:8f:35:7d:c7:4f:2f:a6:03:fd:24:fd:43:ce:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:af:5a:e7:88:45:7c:d5:61:42:1e:a0:b9:1e:a7:5a:fd:72:b0:6c
Fingerprint (sha256): 47:38:30:87:4f:3b:be:36:f5:9f:80:af:03:b3:2d:b0:58:6b:0e:2f:3c:15:00:c7:dc:96:90:7e:06:d5:5c:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cwiaholyspirit.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwiaholyspirit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
ssfrancisjohn.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.ssfrancisjohn.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org

Other certificates including the domain name cwiaholyspirit.org

(limited to 100 certificates)
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org

Certificate

The complete raw certificate details for www.cwiaholyspirit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPfoQ/lTsgPpyrpiv/bm
6ByQHhJ1UKPJPpkSX0PeWhokDRRJJdV1KSLziQA0P6T0uHZUlUXMEiChyGI4chze
If7NaDhfrg4rIhJTFzXivoYoRcDTzD1DQTIWr/sCcX7j73yIT/L6xFPNRM+qlbEu
FJnz5E/LkUyttjGsmvyqc4hbrJzAo+/lEcYaMgFH5SILAUs12A8ZEkalTwbhY9Xy
K+xOejJYwU9vHc9gps6AlhPlHjgxYm2tDPv8oVZKJaknywcz59VmZHBxrF+CsdLF
OZoEs00pJMVBSuj2qdxzKRPBhTltZySfdrrTfC06Dhc9d5RGFW2AuobZUnndiJnE
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294529706865369402317716853455446497870519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 05:45:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 05:45:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwiaholyspirit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21330282873848046171534719626549785636466348317233663362937257747257621151738607526222645011300872072616009816743744652281489718756975035373231591573696934897883228826560570496470051700024053126085020192866602673919880020188869309053758498455385288931492338993733652796864432693013791340881036710369456194229622258539963330457425836257554033715058982170484723698621494025931654942352922537040471112000788826096777371555491414167512616167309938070739357357007852051749768394756119076816580725201735112320706523948633456218480492167835847683415488717773274403060248926182325249777510080104069255485288778168473459737787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6512ebb5416a8f357dc74f2fa603fd24fd43cef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1978 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c03d3e8ca0000040300483046022100f9e2564da7cdafd7594c0579f2de7c26375c7460b3cd3b702e41536f0ed97178022100d405b7712c9c7577f480a09c2f4044ddf5f62f078ba2fc1cb03d6285ea70eb9800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c03d3e8df0000040300473045022076cd882f559c23591766b365911607232e76eb75cbb29ba71ed8b0e89772eac8022100b97c8b5df13cfa80f67c8053615086a6f7d8ab7fc35aaa57f53c93febffa0141
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002de9869a8d0d408b9e246662902006f6faad9be490378683a888a41f5fb9a7228fbcdc3c0995e07d804268d15e8b28901e680a0dd72d1f1f1c58b4f3f6cbfababa318f20862a0f92727393b0bb710b96f99566aa3c67c187867a87bcb2556dfd9edd1f154b9420e82d5152ec30e1c3792e75d141d62cdb9d8a741d6ae7ceac995a0ff3c067664add44c74aeb3ff57db153d07534456d61cbb155f64ef8113bb344275710cbcb5a179a30a29619fc783d86d545f9ec3b94ffe09bcf9c7abb7e77551ea3c71e4af83c6312e480154c45cae050999437c5da3765632abbd2f9af510f5b80979a8d0d9b5cdea23b93349da12a76abe7e591ba51835af4deeebcec69