www.stmaryelyria.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:b5:be:59:7c:3c:7b:a9:f2:b1:f0:66:fd:25:6d:ad:78 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stmaryelyria.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:b5:be:59:7c:3c:7b:a9:f2:b1:f0:66:fd:25:6d:ad:78
Serial Number (int): 294926108372150366227316828336725672439160
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:c8:54:24:df:9c:07:ee:d7:3a:00:82:cc:0c:f5:b2:e7:d0:eb:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:72:db:80:fa:cb:94:c5:a1:1d:52:c1:f1:6c:fd:c7:f7:ca:f7:7c
Fingerprint (sha256): 53:15:d1:33:10:79:11:61:d5:99:41:b2:79:f8:8d:ef:71:5a:c5:87:b3:81:af:e9:13:9d:8f:98:79:e0:5b:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stmaryelyria.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stmaryelyria.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggielandhomeschool.com
catholic.tulane.edu
catholicdos.org
charityguildshop.org
easbothell.org
gssfrankfort.org
heargodscall.com
hfnb.org
holytrinityrcparish.org
icgrandprairie.org
insidethewalls.org
olmcorange.com
olmnh.org
parish.holyfamilyportland.org
popabq.org
sacredheartofjesusonline.org
saintlawrencemartyr.org
saintmartindetours.org
saintmarymosj.com
saintsppta.org
sanjuandiegodallas.org
school.holyfamilyportland.org
sesjchurch.com
shcstx.com
shparish.org
sjcparish.org
st-marys.pvt.k12.ia.us
stanthonyrak.org
stcolumbaonline.org
stedwardsparish.org
stfrancissherwoodschool.org
stjamesgrafton.com
stjohnbosco.com
stjohnch.org
stjosephch.org
stjosephscharlton.com
stjparish.com
stlukedanvilleoh.org
stmaryelyria.org
stmaryrush.org
stmarysamarillo.com
stmarysbismarck.org
stpatrickottumwa.com
stvincentpampa.com
tccelementary.org
www.aggielandhomeschool.com
www.catholic.tulane.edu
www.catholicdos.org
www.charityguildshop.org
www.easbothell.org
www.gssfrankfort.org
www.heargodscall.com
www.hfnb.org
www.holytrinityrcparish.org
www.icgrandprairie.org
www.insidethewalls.org
www.olmcorange.com
www.olmnh.org
www.popabq.org
www.sacredheartofjesusonline.org
www.saintlawrencemartyr.org
www.saintmartindetours.org
www.saintmarymosj.com
www.saintsppta.org
www.sanjuandiegodallas.org
www.sesjchurch.com
www.shcstx.com
www.shparish.org
www.sjcparish.org
www.st-marys.pvt.k12.ia.us
www.stanthonyrak.org
www.stcolumbaonline.org
www.stedwardsparish.org
www.stfrancissherwoodschool.org
www.stjamesgrafton.com
www.stjohnbosco.com
www.stjohnch.org
www.stjosephch.org
www.stjosephscharlton.com
www.stjparish.com
www.stlukedanvilleoh.org
www.stmaryelyria.org
www.stmaryrush.org
www.stmarysamarillo.com
www.stmarysbismarck.org
www.stpatrickottumwa.com
www.stvincentpampa.com
www.tccelementary.org

Other certificates including the domain name stmaryelyria.org

(limited to 100 certificates)
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org
www.stmaryelyria.org
www.stbensnd.org
www.stmaryelyria.org

Certificate

The complete raw certificate details for www.stmaryelyria.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncVaTbasTgc86EgheGeP
9PcmniYuNCMkxuO8TnDJ77ptGnmVMDPshthPB5L1L3F0/6FeL1ZqxOqFvGb2KMPb
v8lDuvgMmwdxH8u55ywJaMUSQx8/ER3wSXBsPP3NUyUcHxrJyZDxPQyywXwUsvYk
wihgBj9sINSGrxEd/mqP/RukE7rCLCLNmw56DZxbFUbLcGWBObo6b/nAgXFpTIvt
icQvrnALPOq8djYpAcnLFRIvs8E0/Bu51nFm5CHVvkcALBijnQjH6efgjWZNk0nQ
ZZg7FqX/6kBVRu2V8Oh0pnn78TGehs/gTX11KMpnW7YSvWbdmiVSM1ieqMVoA70a
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294926108372150366227316828336725672439160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 05:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 05:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stmaryelyria.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19916732146966784980903676798846939326882528583137841834074164286979711071219005917751487604135994918948874835548334724501130783278309419035566687091549999973162165831360816293136975542209084983917753278857613939451154470080232699378189152321158795122600714623130909109092113667904376363249403779555114439031885288709783639162170931107034475899562963323307267867287326806769469024696449862484767309443312401237018411090040334610030236121678124858215141441643080830280806783787769556107413865959716740604343330356333254117491258600294512838281543240000748061684006085102773271092644484158351408174931567488302594202363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efc85424df9c07eed73a0082cc0cf5b2e7d0ebb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parish.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.holyfamilyportland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggielandhomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicdos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easbothell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gssfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holytrinityrcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icgrandprairie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidethewalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmcorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintlawrencemartyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarymosj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sesjchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shcstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys.pvt.k12.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyrak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcolumbaonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardsparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancissherwoodschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesgrafton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnbosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscharlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlukedanvilleoh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryrush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbismarck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickottumwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccelementary.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb6872e240000040300483046022100dffd7f752887b1930770d6bf4ee3d947cf033c68fcc2f6d46b5fc8b0c3bb0d8802210086cc90d3b296f51c9dc691aebab92225fc8dc8d32dfd39c95a3467995835ed75007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bb6872e43000004030047304502206918158c25a868fa7c0bd70e17b44d6b7d1621cfc7f069199822ca8163f4b07c022100940a09a0df665b7129d62b653c1399f5a1fe498e2f1ea2308c5c9df1d92a356c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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