stmarkdenton.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ef:6c:5b:5e:fd:67:da:71:82:b0:fd:f0:ab:08:3f:bd:76 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stmarkdenton.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:6c:5b:5e:fd:67:da:71:82:b0:fd:f0:ab:08:3f:bd:76
Serial Number (int): 429920660470327545835074351325635768466806
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:f9:d9:55:25:3c:a9:a6:04:31:9f:65:04:ed:fe:d2:f8:ba:44:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:8d:2a:72:98:93:dd:54:ed:5f:36:0d:e1:f5:12:bc:66:ca:64:89
Fingerprint (sha256): 4e:f9:7e:7a:69:d3:86:ef:2e:1f:8a:f0:ef:18:5d:98:f8:f7:cc:69:ff:07:a5:b6:c9:52:16:bf:52:5f:51:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stmarkdenton.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stmarkdenton.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catholichogs.com
emmauslakeway.com
fatherduenas.com
goodcounsellr.com
holyrosaryseattle.org
kentnewmancenterparish.org
olfmonroe.org
ourladyofangels.com
pal-me.org
pendola.org
redcradio.org
sacredheartlagrange.org
saintaugustinechurch.org
saintchristophercc.com
saintclareofassisi.org
saintedwardchurch.org
sanrobertochurch.org
school.iccsonline.org
setonyouth.org
sjspenfield.com
skdcc.com
sppnb.org
st-john-nepomucene.org
stambrosehouston.org
stamericigh.com
standrewmoore.com
stannshinnston.com
stap.us
stbonifacesttherese.com
stcolumbkille.org
stedithstein.org
stjcatholicchurch.com
stjeromesatx.org
stjosephsmoulton.org
stjosephtheworker.org
stlouischurchmphs.org
stlucychurch.com
stmargaretmarycumberland.com
stmarkdenton.org
stmaryschooldekalb.org
stmhouston.org
stmichael-farmington.org
stmichaelmckinney.org
stpatrickyorkville.org
straphaelcc.org
straphaelparish.net
themostholytrinity.org
www.catholichogs.com
www.emmauslakeway.com
www.fatherduenas.com
www.goodcounsellr.com
www.hfccvic.org
www.holyrosaryseattle.org
www.kentnewmancenterparish.org
www.olfmonroe.org
www.ourladyofangels.com
www.pal-me.org
www.pendola.org
www.redcradio.org
www.sacredheartlagrange.org
www.saintaugustinechurch.org
www.saintchristophercc.com
www.saintclareofassisi.org
www.saintedwardchurch.org
www.saintmarychurchfwb.org
www.sanrobertochurch.org
www.setonyouth.org
www.sjspenfield.com
www.skdcc.com
www.sppnb.org
www.st-john-nepomucene.org
www.stambrosehouston.org
www.stamericigh.com
www.standrewmoore.com
www.stannshinnston.com
www.stap.us
www.stbonifacesttherese.com
www.stcolumbkille.org
www.stedithstein.org
www.stjcatholicchurch.com
www.stjeromesatx.org
www.stjosephsmoulton.org
www.stjosephtheworker.org
www.stlouischurchmphs.org
www.stlucychurch.com
www.stmargaretmarycumberland.com
www.stmaryschooldekalb.org
www.stmhouston.org
www.stmichael-farmington.org
www.stmichaelmckinney.org
www.stpatrickyorkville.org
www.straphaelcc.org
www.straphaelparish.net
www.themostholytrinity.org

Other certificates including the domain name stmarkdenton.org

(limited to 100 certificates)
www.asjb.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
www.asjb.org
stmarkdenton.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
stmarkdenton.org
olqh.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org
stmarkdenton.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
olqh.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
www.asjb.org
www.asjb.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org
www.sthelenslangside.org.uk
www.asjb.org
olqh.org
olqh.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.asjb.org
www.sthelenslangside.org.uk
olqh.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
olqh.org
www.asjb.org
www.sthelenslangside.org.uk
www.asjb.org
olqh.org
olqh.org
stmarkdenton.org
stmarkdenton.org
olqh.org
stmarkdenton.org
olqh.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org
stmarkdenton.org
olqh.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
www.asjb.org
stmarkdenton.org
www.stmarkdenton.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
stmarkdenton.org
www.asjb.org
olqh.org
olqh.org
www.sthelenslangside.org.uk
www.asjb.org
stmarkdenton.org
stmarkdenton.org
www.asjb.org
www.asjb.org
stmarkdenton.org
olqh.org
olqh.org
www.asjb.org
stmarkdenton.org
olqh.org
www.asjb.org
www.asjb.org
www.asjb.org
stmarkdenton.org
stmarkdenton.org

Certificate

The complete raw certificate details for stmarkdenton.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqq87oHXcfIYXRqvXotv
WMydrHlcsjotacrkWTgWRk4FjS7w6zMo7jtZekFhBKhgoXZwHNRuxwAAhRIAcThI
M67Sbgtb9Waz3zF2zXU46C+OgziaJihm0yVBAxwbFAnQjYkX57qEkI4Akl65yLpm
5MJmrHTBDcVtqvPncTFRl9ANMo++F04Je98X02cL+bwOSQV0hipi9UE2kWi2iFhD
QcRUnZcwplnethIBfVwceC7Li+9N9VvWQ415DB0pQUNDotUP3MVdDs//dG3f6yjB
+45g61OUvRvOq7LjY8RRJ35/sZq9vsm8JRV7Tt4rULlaZqfLgd9L4/CV4H/dSlZF
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429920660470327545835074351325635768466806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-31 04:58:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-29 04:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stmarkdenton.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23564518776508820921210233963510018517206441106849220257500257600771930826088165569156914204801057767381139432029022342385490733309194977127805770218311809686969361913929403022234692061165857027687231094917838862597725025015778622024233224565013478750030502759587977426995609294018241616154579419708158890639544391566598107576483471348069165299351985748333168583903367472420759377246836462686243173241192613807291217184481846790281843865584543409658287323311068548771951971611133206395045516678125446490376388813180408233300022285382534991713314421481449751696481022893704244864947020473320682832038920992882993546587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29f9d955253ca9a604319f6504edfed2f8ba4430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2080 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholichogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmauslakeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherduenas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodcounsellr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosaryseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentnewmancenterparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olfmonroe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofangels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pal-me.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartlagrange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintaugustinechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintchristophercc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintclareofassisi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintedwardchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanrobertochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.iccsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setonyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjspenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skdcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-john-nepomucene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambrosehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamericigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standrewmoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannshinnston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbonifacesttherese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbkille.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedithstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromesatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsmoulton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephtheworker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouischurchmphs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlucychurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaretmarycumberland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkdenton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryschooldekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmhouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichael-farmington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelmckinney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickyorkville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straphaelcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straphaelparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themostholytrinity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholichogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emmauslakeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatherduenas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodcounsellr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfccvic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosaryseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentnewmancenterparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olfmonroe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofangels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pal-me.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pendola.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcradio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartlagrange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintaugustinechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintchristophercc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintclareofassisi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintedwardchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarychurchfwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanrobertochurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setonyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjspenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skdcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-john-nepomucene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambrosehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stamericigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standrewmoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannshinnston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbonifacesttherese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbkille.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedithstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromesatx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsmoulton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephtheworker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouischurchmphs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlucychurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmargaretmarycumberland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryschooldekalb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmhouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichael-farmington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelmckinney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickyorkville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straphaelcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straphaelparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themostholytrinity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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