www.annunciation-ottawa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:75:21:82:a3:04:60:f9:67:57:bd:c9:bd:bc:d7:af:1c was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.annunciation-ottawa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:75:21:82:a3:04:60:f9:67:57:bd:c9:bd:bc:d7:af:1c
Serial Number (int): 276805257977654931741400844605427616821020
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:e1:96:8c:f5:05:91:9d:b5:db:c8:c3:ab:b6:56:89:2e:90:34:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:34:37:58:c9:f5:da:a6:be:fb:87:67:4c:78:88:3d:f4:b4:4f:a9
Fingerprint (sha256): 53:63:a2:34:e8:a3:7a:19:e2:92:a9:68:81:ec:e5:fa:cc:7e:fa:27:ae:f2:81:40:4c:60:ae:38:e0:81:db:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.annunciation-ottawa.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.annunciation-ottawa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewcc.org
annunciation-ottawa.org
annunciationfrankfort.org
assumptionspokane.org
cookevillestthomas.org
divinemercyschuyler.com
hlitanzania.org
holynamechurch.org
holyrosaryfrenstat.com
holyspiritrochester.org
hoxieseguinparishes.org
nativitymen.org
npcatholic.org
olacuba.org
olgchurch.net
ologflint.org
ourladyofmtcarmelfairfieldca.org
paloaltocatholic.net
preciousbloodssm.com
qofa.org
saintagnesparish.org
saintleorcc.com
saintmichaelschurch.net
sfayouth.net
solthaitimission.org
spsh.ca
sspbandj.org
st-patrick-parish.com
sta-sj.ca
stagnescatholicparish.com
stanthonyloyal.org
stbedechurchhay.org
stcharlesonline.org
stedschurch.org
stjeromeclute.org
stjohnalvin.org
stjohnchrysostom.com
stjosephok.com
stjsa.org
stm-ou.org
stmarylanesville.org
stmaryscaldwell.com
stmarywaverly.org
stmax.org
stpatrickslubbock.org
viamariaconsulting.com
www.andrewcc.org
www.annunciation-ottawa.org
www.annunciationfrankfort.org
www.assumptionspokane.org
www.cookevillestthomas.org
www.divinemercyschuyler.com
www.hlitanzania.org
www.holynamechurch.org
www.holyrosaryfrenstat.com
www.holyspiritrochester.org
www.hoxieseguinparishes.org
www.nativitymen.org
www.npcatholic.org
www.olacuba.org
www.olgchurch.net
www.ologflint.org
www.ourladyofmtcarmelfairfieldca.org
www.paloaltocatholic.net
www.preciousbloodssm.com
www.qofa.org
www.saintagnesparish.org
www.saintleorcc.com
www.saintmichaelschurch.net
www.sfayouth.net
www.solthaitimission.org
www.spsh.ca
www.sspbandj.org
www.st-patrick-parish.com
www.sta-sj.ca
www.stagnescatholicparish.com
www.stanthonyloyal.org
www.stbedechurchhay.org
www.stcharlesonline.org
www.stedschurch.org
www.stjeromeclute.org
www.stjohnalvin.org
www.stjohnchrysostom.com
www.stjosephok.com
www.stjsa.org
www.stm-ou.org
www.stmarylanesville.org
www.stmaryscaldwell.com
www.stmarywaverly.org
www.stmax.org
www.stpatrickslubbock.org
www.viamariaconsulting.com

Other certificates including the domain name annunciation-ottawa.org

(limited to 100 certificates)
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net

Certificate

The complete raw certificate details for www.annunciation-ottawa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoIDtDNg7Keb9yw81ivM
dBKIZPClP4FSGYExyRFFEoS92EdWBMNReGpXLgHGcCws9bHCPiy8IbCYm0J4jbyc
aH53Z9/ACqVaSeck63c6J+HMVKpZWDAwaezSJPCQg1b/OortGj3eXTS6QB+STTAH
I0k1QeaRayuzMuv/3YzKHpL9c0Gvcm3TGg0lFF3PYvBWrqwPeim5THHQsxI573lr
wJ7lDM1VSIHOfqlR2wZ3v3LnlPPyS5+OSeJ/aKNnZj4JzCH6K9VQC+CJg8rfNEZJ
iqi+M9XFg/gKFjaylFEl/eI2ZBI+EJZxVOXERNJeTofdH9pSCR1/FeQNEK5AItru
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276805257977654931741400844605427616821020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 06:18:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 06:18:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.annunciation-ottawa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26069203346879860131561909458963157361777605975805321101637136553608767168637076883243305661463802496892359069258411116164623943458430657534898127315937235480613456810417027877866963687154812603649875442758298645553206996435405588428671733851270302993151913293278511272889823579872959124250110007296346642901572831279452252505861198078620091795009466914886547532531703309235042509020137724551342487081566190171669640306646495211738466120624242980547353030826038746297733882561537938552710109595874329118862197146177777476755328902158589395747555181168860914907668490484655661347583768357032200084618932530733744058009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62e1968cf505919db5dbc8c3abb656892e903458
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1974 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickslubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viamariaconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickslubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viamariaconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001633e9df49a000004030048304602210094e4d325893b25a31b40a3e67384c580699bf8a5af1984eb8f31064b70b6f1eb0221008894abe081397349ee5b73e0428ed2805d5d9c2a6d93567e5de6b8b36a268c2e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001633e9df4ac0000040300463044022045ae140d55937367af5c1604524772e87b5d426d894cd7cf7a7c8439fa5f229b02200b528c1df0c322a55a63839667cdcbbc8d45c4e3d8ddd97f9d4d0ba63718dfa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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