www.stbensnd.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:e3:f9:91:48:77:76:76:94:2f:a2:3e:d7:e0:07:9b:8a was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stbensnd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:e3:f9:91:48:77:76:76:94:2f:a2:3e:d7:e0:07:9b:8a
Serial Number (int): 357599515850637129871679499944623757302666
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:7b:f4:1e:6c:a1:c7:04:04:6d:30:2d:87:06:97:dd:cd:ea:2b:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:cb:42:00:02:4e:49:58:9e:1e:5b:88:96:7c:30:47:65:4c:2a:f5
Fingerprint (sha256): 5c:e6:ba:27:f1:3e:98:fa:dd:bb:1e:16:4e:87:33:cc:69:b9:e8:6f:88:1b:40:49:37:14:f1:a4:a2:b0:89:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stbensnd.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stbensnd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allsaintsheights.com
catholicyouthri.com
catholicyouthri.org
centralmcleansaints.com
charityguildshop.org
heargodscall.com
holy-rosary.org
kenperronbuilder.com
kidcause.org
pophouston.org.es
sacredheartofjesusonline.org
saint-albert.org
saintmartindetours.org
saintsppta.org
sanjuandiegodallas.org
sjbde.org
sjcparish.org
sjsmst.org
spxschool.org
srolparish.org
st-peter-church.com
stannegorham.com
stbensnd.org
stbridgetchurch.org
stceciliachurch.org
stgregorys.net
stjohnschoolwinslow.org
stjosephriovista.org
stjparish.com
stmaryelyria.org
stmaryfreeport.com
stncc.net
stpaulsmissiontx.org
stphilipcs.com
stsja.org
sttheresa-littleeggharbor.com
stvincentdepauldc.org
stvincentpampa.com
tccesdover.org
test.ecatholic.com
thomasmorechurch.org
vitanova.org
wtcsc.org
www.allsaintsheights.com
www.catholicyouthri.com
www.catholicyouthri.org
www.centralmcleansaints.com
www.charityguildshop.org
www.csdo.org
www.heargodscall.com
www.holy-rosary.org
www.kenperronbuilder.com
www.kidcause.org
www.pophouston.org.es
www.sacredheartofjesusonline.org
www.saint-albert.org
www.saintmartindetours.org
www.saintsppta.org
www.sanjuandiegodallas.org
www.sjbde.org
www.sjcparish.org
www.sjsmst.org
www.spxschool.org
www.srolparish.org
www.st-peter-church.com
www.stannegorham.com
www.stbensnd.org
www.stbridgetchurch.org
www.stceciliachurch.org
www.stgregorys.net
www.stjohnschoolwinslow.org
www.stjosephriovista.org
www.stjparish.com
www.stmaryelyria.org
www.stmaryfreeport.com
www.stncc.net
www.stpaulsmissiontx.org
www.stphilipcs.com
www.stsja.org
www.sttheresa-littleeggharbor.com
www.stvincentdepauldc.org
www.stvincentpampa.com
www.tccesdover.org
www.thomasmorechurch.org
www.vitanova.org
www.wtcsc.org
www.ymcyoprov.com
ymcyoprov.com

Other certificates including the domain name stbensnd.org

(limited to 100 certificates)
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
www.stegranitecity.org
mail.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
mail.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org
www.stbensnd.org
www.stegranitecity.org

Certificate

The complete raw certificate details for www.stbensnd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQdTSHfuVLLU+r/xhQP
kL+gRHH2LstvobFksuP3uzBhno4zTAYccWhwTDo/RYg85XfJLdZ+9xtCXVuoswKX
agC4FAq+FhEZ7ydU+mTvvWc9udtryHiB7TQTUIeOBYVtJ6YODmfqXG97pA+tmOSy
FMmV9wGN0xEz7EiqgcBDVGlmY/3CCPlo8qwjw/UW3nk+e4ZhPSyOejq4BuS3Eaia
m56RoPVfYp5YGKcpEbpezNPzzXY35zgF18BYRNCl7r1c4kaGwrMkDhEU8l5QaamD
ewGOeC7usGTMLnAEz/Mq7E1ykFwCK67D8gl3Rz0h4kQu6tIpaj3MBYO0vOIpcdjC
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357599515850637129871679499944623757302666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-14 05:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 05:07:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stbensnd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25115561709140332519506500673785742322220836379644270349944817434608759664740598496083590481804061146989073140914163380460471634856174023323872163490483556053640936597618323655827561731126788257101338769475963004862542721855423158869876862272257055676503217147673355689194350554783833278780671595342471478785858991532911867876535235368521538887291112749053476296133095374785627857978072921907973637921139495925188850961275458069884979787271033531053994071458605053247551044399433817363700665213889757952313344308308220215704761292162590958136184064615548038255405824103294665807997626589833487575083094869186274968237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							157bf41e6ca1c704046d302d870697ddcdea2b62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ecatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsaintsheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicyouthri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralmcleansaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charityguildshop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csdo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heargodscall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holy-rosary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenperronbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidcause.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pophouston.org.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofjesusonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-albert.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmartindetours.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsppta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjuandiegodallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjbde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjsmst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spxschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srolparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-church.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannegorham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbensnd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbridgetchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stceciliachurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgregorys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnschoolwinslow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephriovista.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryelyria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryfreeport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stncc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulsmissiontx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsja.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheresa-littleeggharbor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentdepauldc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentpampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tccesdover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomasmorechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitanova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtcsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcyoprov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcyoprov.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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