www.stbensnd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:61:6e:3f:9b:9c:b5:20:e1:77:8a:c1:9d:0c:2a:9d:60:a6 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stbensnd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:6e:3f:9b:9c:b5:20:e1:77:8a:c1:9d:0c:2a:9d:60:a6
Serial Number (int): 381603078668799584437978614266666254426278
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:ec:a9:89:98:ae:cf:05:e4:80:7b:e7:46:69:20:6b:5b:a9:d4:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:ff:3b:9c:75:19:6d:4a:aa:5e:33:80:16:6a:65:bc:33:1b:85:6b
Fingerprint (sha256): 4b:af:56:61:0d:ad:bb:8c:3e:55:4b:3f:5f:ef:d8:70:5c:f8:c5:0b:9c:5f:fa:d9:b6:ac:9f:4d:0a:73:33:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stbensnd.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stbensnd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsheights.com
catholicyouthri.com
catholicyouthri.org
centralmcleansaints.com
charityguildshop.org
heargodscall.com
holy-rosary.org
kenperronbuilder.com
kidcause.org
pophouston.org.es
sacredheartofjesusonline.org
saint-albert.org
saintmartindetours.org
saintsppta.org
sanjuandiegodallas.org
sjbde.org
sjcparish.org
sjsmst.org
spxschool.org
srolparish.org
st-peter-church.com
stannegorham.com
stbensnd.org
stbridgetchurch.org
stceciliachurch.org
stgregorys.net
stjohnschoolwinslow.org
stjosephriovista.org
stjparish.com
stmaryelyria.org
stmaryfreeport.com
stncc.net
stpaulsmissiontx.org
stphilipcs.com
stsja.org
sttheresa-littleeggharbor.com
stvincentdepauldc.org
stvincentpampa.com
tccesdover.org
test.ecatholic.com
thomasmorechurch.org
vitanova.org
wtcsc.org
www.allsaintsheights.com
www.catholicyouthri.com
www.catholicyouthri.org
www.centralmcleansaints.com
www.charityguildshop.org
www.csdo.org
www.heargodscall.com
www.holy-rosary.org
www.kenperronbuilder.com
www.kidcause.org
www.pophouston.org.es
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintmartindetours.org
www.saintsppta.org
www.sanjuandiegodallas.org
www.sjbde.org
www.sjcparish.org
www.sjsmst.org
www.spxschool.org
www.srolparish.org
www.st-peter-church.com
www.stannegorham.com
www.stbensnd.org
www.stbridgetchurch.org
www.stceciliachurch.org
www.stgregorys.net
www.stjohnschoolwinslow.org
www.stjosephriovista.org
www.stjparish.com
www.stmaryelyria.org
www.stmaryfreeport.com
www.stncc.net
www.stpaulsmissiontx.org
www.stphilipcs.com
www.stsja.org
www.sttheresa-littleeggharbor.com
www.stvincentdepauldc.org
www.stvincentpampa.com
www.tccesdover.org
www.thomasmorechurch.org
www.vitanova.org
www.wtcsc.org
www.ymcyoprov.com
ymcyoprov.com

Other certificates including the domain name stbensnd.org

(limited to 100 certificates)
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org

Certificate

The complete raw certificate details for www.stbensnd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7G9psBHoOWBi7+SKnOtD
DIClVWusV/75r6cMgzeDAAmXMXr+EFHOVDmjBgphrXXaaum2M+d3umc7a8QvxPWw
/TN4FZmUaiZIO9AZ6OxJ4EI9nuNC0ia6UC6KLBFAVQXLF9wEVzLZkdrlp1a1naG3
5UZ2Y9xEeShBJeMrIVTilhpotxLzWZzqEiOk9nE2j8ZcXQiMFvgyHJWiIK5/XQmB
Pt7KoJik9/IsSCzDUDo2eJrd1vpYx9YtYMd02qf9dLH49FXOmbI+D6RduI6QPZiz
17YYTWvgm/S0c3RASs2e1wngf2NPNZSiX7TABo+1TJsMPvmwknqy4xC7oA/K38Da
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381603078668799584437978614266666254426278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-27 05:13:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 05:13:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stbensnd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29847179692437605686851225931081665113570552363460108622874412657475075781484072311943153228683987699133650807502393367025838758869172356764295389282531971092010457264284280507209838504623514876963798888301830952084116080568610696594400668946907364420118994522356096274008347895381168226871096497084428588389825108557433488844092849251587014330237062277044752471606129382574713387909672729450701178455700091924795306240589779783312886717004896274557003510769764774381386584309322333138529790959975846859882370083586376520973538506525339090597902116450671544216460328861819239615122180076036708835555012216076462250629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edeca98998aecf05e4807be74669206b5ba9d456
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcyoprov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcyoprov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002823b8ba4af682f8fa830f84c5031f24cba90e4c23c8100c0219763bec7b154ed1a4810320c2dbdbf5d9270539d4eb8351355d0201df7bfe17b6561980762de37b5dacc1c2a1fca336916f9c1b776e8ef7b2d8bc1e18d9d660bd5de5b537f3e214cc5761a12a4c2affd0d2abc43b4728e345a08ebee28ad479514439162c2cca675ad7444143d9b229dd6d66d877770494d7252c457075665ef6e4caa82034c40991b064c4521e0a1a8cc3fc427f01e0c7bd15e2210e385de41faa476dd26ca567ab3b9e468c84d663acb7224f48d12616b4219a4a649a46eea805b362911fa494c219c9976618007996454907d27d828b2af19f6c270d18b7919ed011a94ca9