holycrossaustin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:53:df:2c:83:ab:ee:48:75:8f:30:c0:9d:e6:e5:0e:b5 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holycrossaustin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:53:df:2c:83:ab:ee:48:75:8f:30:c0:9d:e6:e5:0e:b5
Serial Number (int): 278462460850035386250298226114569108262581
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:d1:40:c8:5f:18:58:21:36:0a:c4:ee:a8:b4:bc:5c:23:ce:04:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:61:cf:9f:37:79:12:4f:c9:f2:f0:f5:02:d2:f1:8b:fb:53:ec:60
Fingerprint (sha256): 89:06:ba:a1:59:d7:d3:e3:4f:f7:41:3d:af:2e:ad:76:30:78:fd:12:e3:3d:42:db:0a:67:82:aa:bf:e0:93:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holycrossaustin.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holycrossaustin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsamarillo.org
asagr.org
avosa.org
catholicmenoffaithconf.com
catholicusf.org
ciscoholyrosary.com
cmvic.net
ctkmandan.com
duluthcathmed.org
epiphanystl.org
holycrossaustin.org
ihrc.net
jesusloveshallreign.net
kjtnet.org
mayjesuschristbepraised.com
mercycenter.com
missionsanfranciscodelaespada.org
moorestownknights.org
mountaineercatholic.com
mountcarmelsaipan.com
mystpatricks.com
olgtemple.org
ourladyofmercyhillsboro.org
ourladyoftheplains.org
queenofangelschurch.org
sacredheartbushwood.org
saintandrewwright.org
saintantoninus.org
saintbernardbelfield.com
school.morecommunity.org
st-matthias.net
stadalbertschool.net
stambroselatham.com
stbasilvallejo.org
stbrendans.net
steustachiusparish.com
stfrancis-church.org
stjulianaccf.org
stlawrencementor.org
stmatthewhou.org
stmvictoria.org
stpeterlindsay.org
strichards.com
stritaparish.net
sttitus.org
stwilliams.org
swsaints.org
thebasilica.org
uscatholicmission.org
www.actsamarillo.org
www.asagr.org
www.avosa.org
www.catholicmenoffaithconf.com
www.catholicusf.org
www.ciscoholyrosary.com
www.cmvic.net
www.ctkmandan.com
www.duluthcathmed.org
www.epiphanystl.org
www.ihrc.net
www.jesusloveshallreign.net
www.kjtnet.org
www.mayjesuschristbepraised.com
www.mercycenter.com
www.missionsanfranciscodelaespada.org
www.moorestownknights.org
www.mountaineercatholic.com
www.mountcarmelsaipan.com
www.mystpatricks.com
www.olgtemple.org
www.ourladyofmercyhillsboro.org
www.ourladyoftheplains.org
www.queenofangelschurch.org
www.sacredheartbushwood.org
www.saintandrewwright.org
www.saintantoninus.org
www.saintbernardbelfield.com
www.st-matthias.net
www.stadalbertschool.net
www.stambroselatham.com
www.stbasilvallejo.org
www.stbrendans.net
www.steustachiusparish.com
www.stfrancis-church.org
www.stjulianaccf.org
www.stlawrencementor.org
www.stmatthewhou.org
www.stmvictoria.org
www.stpeterlindsay.org
www.strichards.com
www.stritaparish.net
www.sttitus.org
www.stwilliams.org
www.swsaints.org
www.thebasilica.org
www.uscatholicmission.org

Other certificates including the domain name holycrossaustin.org

(limited to 100 certificates)
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org

Certificate

The complete raw certificate details for holycrossaustin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU0ckxY7gGQ277i998nJ
UzKc2pK3VsYN25cqrGH1T7ohlPifQLBudpAgz/oYsHK9qQip/4X4FmPIe0ORgRsZ
cKuWQ/pU32H1/P+45i9Dn4EYv359K4JltsGWb7Z8lV/YcI7GEAJR+7GmcfuhCcfa
4wpjDx7/tjRgeNTf7Xr69EpvzdokmxSk6lUPyn74F+Sh9PgCnG5jRJttbPkvjnW2
ff8yOSbZXWk9JEXo5VNd0vzb6fHYYxOEGefnDF7e+cEMm7bfTfl2lLEZyG9ZMiru
ZcjG88ozdOWMeYN2iFo3V8JhA8glR5AXgoFzw7bJJ09GVKS13fAG5L9lGCwvtmgA
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278462460850035386250298226114569108262581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-26 05:48:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 05:48:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holycrossaustin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25916877674768957724314693471213093964376091877466178427866617023237778450368702978595825390587097582970410101822286568064912784836770902198772410018201413705826746999599668065067532985300112560210374271243599568923962768696606836175768916718597639339931229215211608058622098965925268173396033562882320967647219881709789020553671444144053853542010265824381341048429806901514400852787349821649697670558885963295700801658499630566814833337163351771439685172753369294758873032263538880341631873877274353572587444475645466528869178222943852085587829349384173486961982627402491020944728824458663089942963380397108126810341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ad140c85f185821360ac4eea8b4bc5c23ce048f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2091 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmenoffaithconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.morecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscatholicmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicmenoffaithconf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicusf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartbushwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintbernardbelfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmvictoria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscatholicmission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001639b346c9700000403004730450221008ada93fe7c3984667c082989e0f67a59fc2d93fa3e80fe4c4e172194f19d652f02203d414ddd4ea5e9df8f3b41b8ea11b0f449daf7e50082c19dc47dc2fabe2f37c8007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001639b346cd70000040300483046022100d712502707d595d120d9f28a0b0d142991187cda28923aa47ff141b6dec8a581022100ce5aa490d0fc9248c1cfeb77dd7406e47b5bc841001f6da2c4c3ae020656d5f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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