www.cwiaholyspirit.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:60:2e:09:e4:c2:13:fe:c5:c9:7a:10:16:e3:c9:2b:fd:21 was issued on by Let's Encrypt.
With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cwiaholyspirit.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:60:2e:09:e4:c2:13:fe:c5:c9:7a:10:16:e3:c9:2b:fd:21Serial Number (int): 294065160877934506752673606784900129357089
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 29:b6:c0:37:ba:17:f0:50:4b:11:11:ff:0f:e2:83:45:5b:4a:12:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 30:03:36:72:f9:e8:6b:94:01:7b:d1:ca:0b:b3:ff:68:55:d9:3b:29
Fingerprint (sha256): 4c:a8:e1:c6:0f:91:13:30:86:4f:56:0d:06:be:68:1a:6f:93:3a:2c:7f:06:d6:7c:49:f2:15:91:36:0a:19:20
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cwiaholyspirit.org
90
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cwiaholyspirit.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
allsaintshayward.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org
allsaintsknoxville.org
assumptionbvmwestgrove.org
catholicargos.com
catholicfoundationdob.com
ctrcc.com
ctrschool.com
ctryouth.com
cwiaholyspirit.org
cwtrcatholics.org
divinemercydenton.com
epiphanycatholic.org
holyrosarynorthmankato.com
kc5803.org
ntxcmc.org
olgoodcounselssm.com
ollnovato.org
raidercatholic.org
rocklincatholic.org
saintannebellview.org
saintbarths.org
saintjohnpaulii-kewanee.org
saintpats.net
sanjosechurch.org
sataps.com
sjcatholicchurch.org
slparish.org
ssfrancisjohn.org
staustin.org
stjamesschool.pvt.k12.ia.us
stjohnschoolonline.org
stjosephmarshall.org
stlucie.cc
stmartindp.org
stmarych.com
stmarysbluffton.org
stmarysiloamsprings.com
stmarysridgefield.org
stmarystaroftheseaballinger.org
stmichaelgarland.org
stpatsbelfastfillmore.org
stpeterchesaning.org
stpeterchillicothe.com
visitationcatholic.com
wlpcatholic.org
www.allsaintshayward.org
www.allsaintsknoxville.org
www.assumptionbvmwestgrove.org
www.catholicargos.com
www.catholicfoundationdob.com
www.ctrcc.com
www.ctrschool.com
www.ctryouth.com
www.cwiaholyspirit.org
www.cwtrcatholics.org
www.divinemercydenton.com
www.epiphanycatholic.org
www.holyrosarynorthmankato.com
www.kc5803.org
www.ntxcmc.org
www.olgoodcounselssm.com
www.ollnovato.org
www.raidercatholic.org
www.rocklincatholic.org
www.saintannebellview.org
www.saintbarths.org
www.saintjohnpaulii-kewanee.org
www.saintpats.net
www.sanjosechurch.org
www.sataps.com
www.sjcatholicchurch.org
www.slparish.org
www.ssfrancisjohn.org
www.staustin.org
www.stjamesschool.pvt.k12.ia.us
www.stjohnschoolonline.org
www.stjosephmarshall.org
www.stlucie.cc
www.stmartindp.org
www.stmarych.com
www.stmarysbluffton.org
www.stmarysiloamsprings.com
www.stmarysridgefield.org
www.stmarystaroftheseaballinger.org
www.stmichaelgarland.org
www.stpatsbelfastfillmore.org
www.stpeterchesaning.org
www.stpeterchillicothe.com
www.visitationcatholic.com
www.wlpcatholic.org
Other certificates including the domain name cwiaholyspirit.org
(limited to 100 certificates)
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
www.ihmparishlansing.org
stjameswashington.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
www.cwiaholyspirit.org
www.ihmparishlansing.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.princeofpeaceormond.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.princeofpeaceormond.com
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
www.ctryouth.com
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
cwiaholyspirit.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ihmparishlansing.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.cwiaholyspirit.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
stjameswashington.org
www.ctryouth.com
stjameswashington.org
stjameswashington.org
Certificate
The complete raw certificate details for www.cwiaholyspirit.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINJzCCDA+gAwIBAgISA2AuCeTCE/7FyXoQFuPJK/0hMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTgwNTQxMjdaFw0x OTA3MTcwNTQxMjdaMCExHzAdBgNVBAMTFnd3dy5jd2lhaG9seXNwaXJpdC5vcmcw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtXPwtIWCdY8J4a9jrRno 61CGRXJ3/qY26pdDS2ujvGF8m9nA+T5ZvErhJWDWbxSLzPeTj5XmliMSUVwzU6WL bxv4JcZ44WdoQ0DWR8fh8Qqi1Nrs55h6Ap7RNsg3q3S+1xc8l5sW8ZT2QkjhDrog 6Y2uNkHkzbRs4Z9Y8F54s3lOKcad9PqYD67h3p7LYHNDfT12SpgjmFEDUJHpymik 9GOD+AJtpfQk0gkRhIOpH1qRCHk3zyklaQOd+BJWoppHKL5DSFybzQ0zYYj/Q8B8 d1Y0AvBItwj+D62dFIbQTPpIettnQsY0MmkwlbhjsSRu2ZwCAcyRlRl/QIALnSfV AgMBAAGjggouMIIKKjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCm2wDe6F/BQSxER /w/ig0VbShJ9MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wggfjBgNVHREEggfaMIIH1oIUYWxsc2FpbnRzaGF5d2FyZC5v cmeCFmFsbHNhaW50c2tub3h2aWxsZS5vcmeCGmFzc3VtcHRpb25idm13ZXN0Z3Jv dmUub3JnghFjYXRob2xpY2FyZ29zLmNvbYIZY2F0aG9saWNmb3VuZGF0aW9uZG9i LmNvbYIJY3RyY2MuY29tgg1jdHJzY2hvb2wuY29tggxjdHJ5b3V0aC5jb22CEmN3 aWFob2x5c3Bpcml0Lm9yZ4IRY3d0cmNhdGhvbGljcy5vcmeCFWRpdmluZW1lcmN5 ZGVudG9uLmNvbYIUZXBpcGhhbnljYXRob2xpYy5vcmeCGmhvbHlyb3Nhcnlub3J0 aG1hbmthdG8uY29tggprYzU4MDMub3JnggpudHhjbWMub3JnghRvbGdvb2Rjb3Vu c2Vsc3NtLmNvbYINb2xsbm92YXRvLm9yZ4IScmFpZGVyY2F0aG9saWMub3JnghNy b2NrbGluY2F0aG9saWMub3JnghVzYWludGFubmViZWxsdmlldy5vcmeCD3NhaW50 YmFydGhzLm9yZ4Ibc2FpbnRqb2hucGF1bGlpLWtld2FuZWUub3Jngg1zYWludHBh dHMubmV0ghFzYW5qb3NlY2h1cmNoLm9yZ4IKc2F0YXBzLmNvbYIUc2pjYXRob2xp Y2NodXJjaC5vcmeCDHNscGFyaXNoLm9yZ4IRc3NmcmFuY2lzam9obi5vcmeCDHN0 YXVzdGluLm9yZ4Ibc3RqYW1lc3NjaG9vbC5wdnQuazEyLmlhLnVzghZzdGpvaG5z Y2hvb2xvbmxpbmUub3JnghRzdGpvc2VwaG1hcnNoYWxsLm9yZ4IKc3RsdWNpZS5j Y4IOc3RtYXJ0aW5kcC5vcmeCDHN0bWFyeWNoLmNvbYITc3RtYXJ5c2JsdWZmdG9u Lm9yZ4IXc3RtYXJ5c2lsb2Ftc3ByaW5ncy5jb22CFXN0bWFyeXNyaWRnZWZpZWxk Lm9yZ4Ifc3RtYXJ5c3Rhcm9mdGhlc2VhYmFsbGluZ2VyLm9yZ4IUc3RtaWNoYWVs Z2FybGFuZC5vcmeCGXN0cGF0c2JlbGZhc3RmaWxsbW9yZS5vcmeCFHN0cGV0ZXJj aGVzYW5pbmcub3JnghZzdHBldGVyY2hpbGxpY290aGUuY29tghZ2aXNpdGF0aW9u Y2F0aG9saWMuY29tgg93bHBjYXRob2xpYy5vcmeCGHd3dy5hbGxzYWludHNoYXl3 YXJkLm9yZ4Iad3d3LmFsbHNhaW50c2tub3h2aWxsZS5vcmeCHnd3dy5hc3N1bXB0 aW9uYnZtd2VzdGdyb3ZlLm9yZ4IVd3d3LmNhdGhvbGljYXJnb3MuY29tgh13d3cu Y2F0aG9saWNmb3VuZGF0aW9uZG9iLmNvbYINd3d3LmN0cmNjLmNvbYIRd3d3LmN0 cnNjaG9vbC5jb22CEHd3dy5jdHJ5b3V0aC5jb22CFnd3dy5jd2lhaG9seXNwaXJp dC5vcmeCFXd3dy5jd3RyY2F0aG9saWNzLm9yZ4IZd3d3LmRpdmluZW1lcmN5ZGVu dG9uLmNvbYIYd3d3LmVwaXBoYW55Y2F0aG9saWMub3Jngh53d3cuaG9seXJvc2Fy eW5vcnRobWFua2F0by5jb22CDnd3dy5rYzU4MDMub3Jngg53d3cubnR4Y21jLm9y Z4IYd3d3Lm9sZ29vZGNvdW5zZWxzc20uY29tghF3d3cub2xsbm92YXRvLm9yZ4IW d3d3LnJhaWRlcmNhdGhvbGljLm9yZ4IXd3d3LnJvY2tsaW5jYXRob2xpYy5vcmeC GXd3dy5zYWludGFubmViZWxsdmlldy5vcmeCE3d3dy5zYWludGJhcnRocy5vcmeC H3d3dy5zYWludGpvaG5wYXVsaWkta2V3YW5lZS5vcmeCEXd3dy5zYWludHBhdHMu bmV0ghV3d3cuc2Fuam9zZWNodXJjaC5vcmeCDnd3dy5zYXRhcHMuY29tghh3d3cu c2pjYXRob2xpY2NodXJjaC5vcmeCEHd3dy5zbHBhcmlzaC5vcmeCFXd3dy5zc2Zy YW5jaXNqb2huLm9yZ4IQd3d3LnN0YXVzdGluLm9yZ4Ifd3d3LnN0amFtZXNzY2hv b2wucHZ0LmsxMi5pYS51c4Iad3d3LnN0am9obnNjaG9vbG9ubGluZS5vcmeCGHd3 dy5zdGpvc2VwaG1hcnNoYWxsLm9yZ4IOd3d3LnN0bHVjaWUuY2OCEnd3dy5zdG1h cnRpbmRwLm9yZ4IQd3d3LnN0bWFyeWNoLmNvbYIXd3d3LnN0bWFyeXNibHVmZnRv bi5vcmeCG3d3dy5zdG1hcnlzaWxvYW1zcHJpbmdzLmNvbYIZd3d3LnN0bWFyeXNy aWRnZWZpZWxkLm9yZ4Ijd3d3LnN0bWFyeXN0YXJvZnRoZXNlYWJhbGxpbmdlci5v cmeCGHd3dy5zdG1pY2hhZWxnYXJsYW5kLm9yZ4Idd3d3LnN0cGF0c2JlbGZhc3Rm aWxsbW9yZS5vcmeCGHd3dy5zdHBldGVyY2hlc2FuaW5nLm9yZ4Iad3d3LnN0cGV0 ZXJjaGlsbGljb3RoZS5jb22CGnd3dy52aXNpdGF0aW9uY2F0aG9saWMuY29tghN3 d3cud2xwY2F0aG9saWMub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7agzGtMxCRIZzOJU9CcMK//V5C IAjGNzV55hB7zFYAAAFqLy29agAABAMARzBFAiEAsaIGPGUSYR8GK9ZxQ0eordv5 OBvBCFX8foae64tWp58CIGlLGAV4Z8yIUtDr0P7blGxiWpbMP2BJIzB7jz9K4Nwx AHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFqLy290AAABAMA RjBEAiAB6AiO4RdTxV2D/62CNk0bjiJ8NzUPzDistnkiYcZxOAIgbvbupj9f+H7h qnQ6jxVISVbd3mSdCBmDZTFxpisNB7wwDQYJKoZIhvcNAQELBQADggEBAAHDVqy6 6Ltu0zdlseZTw/X0nfKeD0sX8dTWSwWxhDOf22Iq0+MbpqMEA9FtBuPjOBXsizJ9 0cBtFzgWeFsrXy8+bQYUp2RQ16Xgx3RV4ulc+kO3FHlruwoPRfBtPhwVEeVWxzmJ Acy23+7pg2HCLalQw8E9Vqh8/XE7EY7aGveqwptPdWuaQnZqTSLysoIFbXRE95Sw r1P06J6SF+X4IE87bbG9kI6+ZNvxpDFksopIhc6RGdngurw5nky73srPBL3W8Uaq cwuh9PbSmXSkmLxb6yIGAv3XEH7GHt+0v740oAgvNueLCvtqZa189IJRH0FSr8CF /UI+qY+BPuxtDFs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrVz8LSFgnWPCeGvY60Z 6OtQhkVyd/6mNuqXQ0tro7xhfJvZwPk+WbxK4SVg1m8Ui8z3k4+V5pYjElFcM1Ol i28b+CXGeOFnaENA1kfH4fEKotTa7OeYegKe0TbIN6t0vtcXPJebFvGU9kJI4Q66 IOmNrjZB5M20bOGfWPBeeLN5TinGnfT6mA+u4d6ey2BzQ309dkqYI5hRA1CR6cpo pPRjg/gCbaX0JNIJEYSDqR9akQh5N88pJWkDnfgSVqKaRyi+Q0hcm80NM2GI/0PA fHdWNALwSLcI/g+tnRSG0Ez6SHrbZ0LGNDJpMJW4Y7EkbtmcAgHMkZUZf0CAC50n 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294065160877934506752673606784900129357089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 05:41:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 05:41:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cwiaholyspirit.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25589615358882942849871060790521079584164082116575885629246600394934971318080705223522929696336760770289949404266449167186812681189514935944461816937130520097917915062120019792139197559958249200597452560327604600170664583109669224375256178378006765019781872753866284143950257965995691429531266888061226495086641595047064905700726234127576044451310269768338543930709253154256658865442600565762215144257663899693904606562941360501331100439601665131963557211305753965270515620038886149339593006929109722322071435758921812948423672333718819410357934906267693756375176647365743485179838729268190733747529147465070838360021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29b6c037ba17f0504b1111ff0fe283455b4a127d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintshayward.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsknoxville.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionbvmwestgrove.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicargos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicfoundationdob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrcc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctryouth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwiaholyspirit.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtrcatholics.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercydenton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanycatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarynorthmankato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc5803.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxcmc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgoodcounselssm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollnovato.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raidercatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocklincatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannebellview.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbarths.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohnpaulii-kewanee.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpats.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosechurch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sataps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcatholicchurch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slparish.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssfrancisjohn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staustin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschool.pvt.k12.ia.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolonline.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephmarshall.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucie.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarych.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbluffton.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysiloamsprings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysridgefield.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystaroftheseaballinger.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelgarland.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatsbelfastfillmore.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchesaning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterchillicothe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitationcatholic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlpcatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintshayward.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsknoxville.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionbvmwestgrove.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicargos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicfoundationdob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrcc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctrschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctryouth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwiaholyspirit.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwtrcatholics.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercydenton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarynorthmankato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kc5803.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntxcmc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgoodcounselssm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollnovato.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raidercatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocklincatholic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannebellview.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbarths.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjohnpaulii-kewanee.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpats.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosechurch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sataps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcatholicchurch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slparish.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssfrancisjohn.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staustin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesschool.pvt.k12.ia.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolonline.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephmarshall.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucie.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindp.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarych.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbluffton.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysiloamsprings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysridgefield.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystaroftheseaballinger.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelgarland.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatsbelfastfillmore.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchesaning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterchillicothe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitationcatholic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlpcatholic.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2f2dbd6a0000040300473045022100b1a2063c6512611f062bd6714347a8addbf9381bc10855fc7e869eeb8b56a79f0220694b18057867cc8852d0ebd0fedb946c625a96cc3f604923307b8f3f4ae0dc31007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2f2dbdd00000040300463044022001e8088ee11753c55d83ffad82364d1b8e227c37350fcc38acb6792261c6713802206ef6eea63f5ff87ee1aa743a8f15484956ddde649d081983653171a62b0d07bc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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