www.cwiaholyspirit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:2e:09:e4:c2:13:fe:c5:c9:7a:10:16:e3:c9:2b:fd:21 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cwiaholyspirit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:2e:09:e4:c2:13:fe:c5:c9:7a:10:16:e3:c9:2b:fd:21
Serial Number (int): 294065160877934506752673606784900129357089
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:b6:c0:37:ba:17:f0:50:4b:11:11:ff:0f:e2:83:45:5b:4a:12:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:03:36:72:f9:e8:6b:94:01:7b:d1:ca:0b:b3:ff:68:55:d9:3b:29
Fingerprint (sha256): 4c:a8:e1:c6:0f:91:13:30:86:4f:56:0d:06:be:68:1a:6f:93:3a:2c:7f:06:d6:7c:49:f2:15:91:36:0a:19:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cwiaholyspirit.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cwiaholyspirit.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org

Other certificates including the domain name cwiaholyspirit.org

(limited to 100 certificates)
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org

Certificate

The complete raw certificate details for www.cwiaholyspirit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrVz8LSFgnWPCeGvY60Z
6OtQhkVyd/6mNuqXQ0tro7xhfJvZwPk+WbxK4SVg1m8Ui8z3k4+V5pYjElFcM1Ol
i28b+CXGeOFnaENA1kfH4fEKotTa7OeYegKe0TbIN6t0vtcXPJebFvGU9kJI4Q66
IOmNrjZB5M20bOGfWPBeeLN5TinGnfT6mA+u4d6ey2BzQ309dkqYI5hRA1CR6cpo
pPRjg/gCbaX0JNIJEYSDqR9akQh5N88pJWkDnfgSVqKaRyi+Q0hcm80NM2GI/0PA
fHdWNALwSLcI/g+tnRSG0Ez6SHrbZ0LGNDJpMJW4Y7EkbtmcAgHMkZUZf0CAC50n
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294065160877934506752673606784900129357089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 05:41:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 05:41:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwiaholyspirit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25589615358882942849871060790521079584164082116575885629246600394934971318080705223522929696336760770289949404266449167186812681189514935944461816937130520097917915062120019792139197559958249200597452560327604600170664583109669224375256178378006765019781872753866284143950257965995691429531266888061226495086641595047064905700726234127576044451310269768338543930709253154256658865442600565762215144257663899693904606562941360501331100439601665131963557211305753965270515620038886149339593006929109722322071435758921812948423672333718819410357934906267693756375176647365743485179838729268190733747529147465070838360021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29b6c037ba17f0504b1111ff0fe283455b4a127d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2f2dbd6a0000040300473045022100b1a2063c6512611f062bd6714347a8addbf9381bc10855fc7e869eeb8b56a79f0220694b18057867cc8852d0ebd0fedb946c625a96cc3f604923307b8f3f4ae0dc31007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2f2dbdd00000040300463044022001e8088ee11753c55d83ffad82364d1b8e227c37350fcc38acb6792261c6713802206ef6eea63f5ff87ee1aa743a8f15484956ddde649d081983653171a62b0d07bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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