www.stpeters-standrews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:18:5c:b1:7e:f5:32:4a:d9:5d:03:02:75:a7:09:0e:5c:25 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stpeters-standrews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:5c:b1:7e:f5:32:4a:d9:5d:03:02:75:a7:09:0e:5c:25
Serial Number (int): 356739131120309757247990234446316585245733
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:aa:9e:10:55:c4:e9:5f:22:51:8c:3a:df:36:e8:36:b6:b5:d0:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:15:c7:40:67:c8:ff:80:76:cb:2d:5b:39:4e:9a:ea:66:b5:08:4b
Fingerprint (sha256): 49:9c:a6:95:d4:39:e4:f6:d6:e2:85:fc:cc:d1:48:66:75:29:be:5d:ff:39:07:7c:ef:66:34:8f:be:f4:ff:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stpeters-standrews.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stpeters-standrews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arch-no.org
archdiocese-no.org
armorofgodradio.com
bensisnj.com
bensisnj.org
cathedralofstpeter.org
church.cathedralofstpeter.org
ctcatholicmen.org
ctkworc.org
fatimabq.org
fatimachurchabq.org
fatimaschoolabq.com
gbswebsitedevelopment.com
guardianangelchurch.org
hfccvic.org
holyangelscc.com
icchurchmd.org
immaculateconceptionmd.com
johnpaul2foundationofmichigan.com
ktnz.org
nativitystmary.com
ollparish.info
patdioschools.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintannehamel.org
saintmarksparish.org
saintvincentcatholicchurch.com
school.scswf.org
sjtac.org
smsangels.org
southeastrochestercatholics.org
st-peter-reserve.org
stannstmary.org
stemma.org
stgmbne.com
stjosephatkinson.org
stjosephcs.org
stjosephretreat.org
stjworker.com
stlawrencegoffstown.org
stmarycs.net
stmarydelavan.org
stmaryorange.online
stmarysbronson.org
stmichaelssunsetpark.com
stpeters-standrews.com
svdparlington.org
svdpthornliebank.org.uk
www.arch-no.org
www.archdiocese-no.org
www.armorofgodradio.com
www.bensisnj.com
www.bensisnj.org
www.cathedralofstpeter.org
www.catholic.tulane.edu
www.cc.blessedsacramentnc.org
www.ctcatholicmen.org
www.ctkworc.org
www.fatimabq.org
www.fatimaschoolabq.com
www.gbswebsitedevelopment.com
www.holyangelscc.com
www.icchurchmd.org
www.immaculateconceptionmd.com
www.johnpaul2foundationofmichigan.com
www.ktnz.org
www.ollparish.info
www.olss-no.com
www.ourschool.stpaulkensington.org
www.parish.ckseattle.org
www.rceducation.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintannehamel.org
www.saintmarksparish.org
www.saintvincentcatholicchurch.com
www.school.ckseattle.org
www.school.simonandjude.org
www.servantsofcharity.org
www.sjtac.org
www.smsangels.org
www.smsdsj.org
www.southeastrochestercatholics.org
www.st-peter-reserve.org
www.stannstmary.org
www.stemma.org
www.stgmbne.com
www.stjosephatkinson.org
www.stjosephretreat.org
www.stjworker.com
www.stlawrencegoffstown.org
www.stmarydelavan.org
www.stmaryorange.online
www.stmarysbronson.org
www.stmichaelssunsetpark.com
www.stpeters-standrews.com
www.svdparlington.org

Other certificates including the domain name stpeters-standrews.com

(limited to 100 certificates)
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
stpeters-standrews.com
cchelpnj.org
stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com

Certificate

The complete raw certificate details for www.stpeters-standrews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtF1MHMFEdZsY3EDzuEK
NJ8HbzHOEo//TlTcvBOjsUBzXYDQZ2INOAQ5HHaz8mJKVtrCyameagFBy4+xIwM5
JUdYz75Ao+EiaQYJq4eAQPytPVta+HAqTembtbK0dbfJDg73hdD0rM2iudMpfttx
O2wuANS5J7fypvddERPJiAhaj2uNRJScv524dfnk5Nf0crO3qtfYq/WDjjrdnsu1
ex10wa4+4dxnza+XOjRK/MK8bQTsXG43IWj/ihnecZZlvIkoyzcCLbLpxJFGKx5z
s7HcBCyAmNMIKDuCTkvOqMuCUDthyrJi5edue9jJMqlOYZJUGkLr8JObBSDkLIFT
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356739131120309757247990234446316585245733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 04:23:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-14 04:23:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stpeters-standrews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25098471859503718819057073044544596677677375744529199837531400073386746570645454595460975440390631848478683211612084100308417808008683613379121477696907938481045665846584647913043913125295670489830030135782161862081136147096717381116975345352614921236103246320073754550941834255660706353737417177186345999290467791044249590056790824261177486527772367228130213841678315364324654605165861965110906000327689395530956265202664328604502079840528451003773478107537746439759224969133585669721694402586257418761840169030856200643517070638457190798706848565448068864190265098267590952240596844512386828482814086645872293139439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6faa9e1055c4e95f22518c3adf36e836b6b5d09e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archdiocese-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctcatholicmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkworc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimachurchabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbswebsitedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardianangelchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfccvic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icchurchmd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollparish.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patdioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarksparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintvincentcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjtac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-reserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephretreat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarycs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbronson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelssunsetpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeters-standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdparlington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdpthornliebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arch-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archdiocese-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.blessedsacramentnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctcatholicmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkworc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbswebsitedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icchurchmd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollparish.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olss-no.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourschool.stpaulkensington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ckseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rceducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarksparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintvincentcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.ckseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.simonandjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servantsofcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjtac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsdsj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-reserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephretreat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbronson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelssunsetpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeters-standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdparlington.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ecd45e38813c5675504ffaaa4835614b1455ae5f05cf15c4ceb7f515cd6e26cbcb38e7b08dde2e1e7744bf45e4dcde5c5eb1d28f86c7f94230051a42bb410be6e2a64837d630f661dfa4573ce3ffb0e5e8f29882008324fcde57a4ace597f50c326c325a13c355b04dcabe903169e4ccbfa7353d9487ee0e2e097c84801f08b81cd457e6989388c907a111d1e49ce9807aa9ab5cd39261f52b72b28348a872d14f1475be1f8c1ad7d63aecd5c8c638b07ee63e68501cfcf5165235a09774714fece34727322f31d1e467ca1aa2fa1b232863c4a47aaed2e40daf0d48fc3e803e49deaf6febbaf4d94522d2e147803e12a3fa873752b19a355038196eff23e5b