www.ourladyofthelakehalifax.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:c5:34:c4:cc:c0:f1:bc:f9:ad:00:2e:b9:8b:b5:32:69 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ourladyofthelakehalifax.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:c5:34:c4:cc:c0:f1:bc:f9:ad:00:2e:b9:8b:b5:32:69
Serial Number (int): 295286944026634460894800675630587854533225
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:28:99:48:a7:a3:29:66:bb:10:72:c9:67:13:27:ed:f6:1f:c6:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:0c:c7:60:4c:2e:02:b4:23:ee:db:38:4b:4f:c0:08:ba:d5:ea:53
Fingerprint (sha256): 89:67:95:69:a7:a9:87:43:ed:26:bb:7e:5c:67:3a:27:f5:7c:c5:9c:7a:73:5f:ca:3b:a9:87:9c:35:c1:a2:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ourladyofthelakehalifax.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ourladyofthelakehalifax.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

attackabv.com
bensisnj.com
blessedsacramentwv.org
cathedralofstpeter.org
christtheteacher.org
churchofsaintann.net
encounteringchristcampaign.org
fatimabq.org
guadalupehobbs.com
hfglendale.org
holyangelscc.com
ics-newmadrid.com
johnpaul2foundationofmichigan.com
mancoichicago.org
nsucatholics.org
olph.dionet.org
olvnj.com
ourladyofthelakehalifax.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintacc.com
saintannehamel.org
santaclaracatholicchurch.org
school.stambroselatham.com
scswf.org
smsangels.org
southeastrochestercatholics.org
stannstmary.org
stanthonybelleville.com
stcatherineslc.org
stgmbne.com
sthelenorangefield.org
stipend.stambroselatham.com
stjohnmany.org
stjosephatkinson.org
stjosephedinburg.org
stlawrencegoffstown.org
stmarkindy.org
stmarydelavan.org
stmarygilberts.com
stmarygreenville.org
stmarygreenvilleschool.org
stmaryorange.online
stmaryscanaseraga.org
stpatmadras.com
stpeterthefisherman.me
stphilipspetrolia.ca
williamstowncatholics.org
www.attackabv.com
www.bensisnj.com
www.blessedsacramentwv.org
www.cathedralofstpeter.org
www.christtheteacher.org
www.churchofsaintann.net
www.encounteringchristcampaign.org
www.fatimabq.org
www.guadalupehobbs.com
www.hfglendale.org
www.holyangelscc.com
www.holycrossaustin.org
www.ics-newmadrid.com
www.johnpaul2foundationofmichigan.com
www.mancoichicago.org
www.nsucatholics.org
www.olph.dionet.org
www.olvnj.com
www.ourladyofthelakehalifax.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintacc.com
www.saintannehamel.org
www.santaclaracatholicchurch.org
www.scswf.org
www.smsangels.org
www.southeastrochestercatholics.org
www.stannstmary.org
www.stanthonybelleville.com
www.stcatherineslc.org
www.stgmbne.com
www.sthelenorangefield.org
www.stjohnmany.org
www.stjosephatkinson.org
www.stlawrencegoffstown.org
www.stmarkindy.org
www.stmarydelavan.org
www.stmarygilberts.com
www.stmarygreenville.org
www.stmarygreenvilleschool.org
www.stmaryorange.online
www.stmaryscanaseraga.org
www.stpatmadras.com
www.stpeterthefisherman.me
www.stphilipspetrolia.ca
www.williamstowncatholics.org

Other certificates including the domain name ourladyofthelakehalifax.org

(limited to 100 certificates)
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org

Certificate

The complete raw certificate details for www.ourladyofthelakehalifax.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINzDCCDLSgAwIBAgISA2PFNMTMwPG8+a0ALrmLtTJpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDQwNTQ1MzNaFw0x
OTA5MDIwNTQ1MzNaMCoxKDAmBgNVBAMTH3d3dy5vdXJsYWR5b2Z0aGVsYWtlaGFs
aWZheC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieYZCmX2x
ofOs6eToEEUAqQoFp4sOrW9zONpX27UtC93HPpGFp9EkB082X3au0XAPUfhbXcHc
c93Q9dbGgOMxcfHuRVlwNIuOhGPLX32Up21lxHs9KssMtDJjJyqCO+5WF5bk4CHX
7StTl5peJbvrsuAmjGa83v0LAxT+RqKjVduZeZ6OUPyzM6cTgiyhVsXGmeXXI/Q4
cXRkKbVSYlxEc5D1dEuxZi+VdAEy6HAIv22C8rJXLVuF7Q3PvDmKqY7Gawd7G+VL
EOGq5+T62Jhccd53W1vh3KUNYjFvHMJD+YP2wzCpYZIt9iW+QojTTekA18mSoq8N
hSZ6N45MdRPdAgMBAAGjggrKMIIKxjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFP8o
mUinoylmuxByyWcTJ+32H8bhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggh/BgNVHREEggh2MIIIcoINYXR0YWNrYWJ2
LmNvbYIMYmVuc2lzbmouY29tghZibGVzc2Vkc2FjcmFtZW50d3Yub3JnghZjYXRo
ZWRyYWxvZnN0cGV0ZXIub3JnghRjaHJpc3R0aGV0ZWFjaGVyLm9yZ4IUY2h1cmNo
b2ZzYWludGFubi5uZXSCHmVuY291bnRlcmluZ2NocmlzdGNhbXBhaWduLm9yZ4IM
ZmF0aW1hYnEub3JnghJndWFkYWx1cGVob2Jicy5jb22CDmhmZ2xlbmRhbGUub3Jn
ghBob2x5YW5nZWxzY2MuY29tghFpY3MtbmV3bWFkcmlkLmNvbYIham9obnBhdWwy
Zm91bmRhdGlvbm9mbWljaGlnYW4uY29tghFtYW5jb2ljaGljYWdvLm9yZ4IQbnN1
Y2F0aG9saWNzLm9yZ4IPb2xwaC5kaW9uZXQub3JngglvbHZuai5jb22CG291cmxh
ZHlvZnRoZWxha2VoYWxpZmF4Lm9yZ4IRcmNzbW9udGdvbWVyeS5vcmeCGXJlZ2lu
YWNhZWxpYWNhZGVteXBzcC5vcmeCDHNhaW50YWNjLmNvbYISc2FpbnRhbm5laGFt
ZWwub3JnghxzYW50YWNsYXJhY2F0aG9saWNjaHVyY2gub3JnghpzY2hvb2wuc3Rh
bWJyb3NlbGF0aGFtLmNvbYIJc2Nzd2Yub3Jngg1zbXNhbmdlbHMub3Jngh9zb3V0
aGVhc3Ryb2NoZXN0ZXJjYXRob2xpY3Mub3Jngg9zdGFubnN0bWFyeS5vcmeCF3N0
YW50aG9ueWJlbGxldmlsbGUuY29tghJzdGNhdGhlcmluZXNsYy5vcmeCC3N0Z21i
bmUuY29tghZzdGhlbGVub3JhbmdlZmllbGQub3JnghtzdGlwZW5kLnN0YW1icm9z
ZWxhdGhhbS5jb22CDnN0am9obm1hbnkub3JnghRzdGpvc2VwaGF0a2luc29uLm9y
Z4IUc3Rqb3NlcGhlZGluYnVyZy5vcmeCF3N0bGF3cmVuY2Vnb2Zmc3Rvd24ub3Jn
gg5zdG1hcmtpbmR5Lm9yZ4IRc3RtYXJ5ZGVsYXZhbi5vcmeCEnN0bWFyeWdpbGJl
cnRzLmNvbYIUc3RtYXJ5Z3JlZW52aWxsZS5vcmeCGnN0bWFyeWdyZWVudmlsbGVz
Y2hvb2wub3JnghNzdG1hcnlvcmFuZ2Uub25saW5lghVzdG1hcnlzY2FuYXNlcmFn
YS5vcmeCD3N0cGF0bWFkcmFzLmNvbYIWc3RwZXRlcnRoZWZpc2hlcm1hbi5tZYIU
c3RwaGlsaXBzcGV0cm9saWEuY2GCGXdpbGxpYW1zdG93bmNhdGhvbGljcy5vcmeC
EXd3dy5hdHRhY2thYnYuY29tghB3d3cuYmVuc2lzbmouY29tghp3d3cuYmxlc3Nl
ZHNhY3JhbWVudHd2Lm9yZ4Iad3d3LmNhdGhlZHJhbG9mc3RwZXRlci5vcmeCGHd3
dy5jaHJpc3R0aGV0ZWFjaGVyLm9yZ4IYd3d3LmNodXJjaG9mc2FpbnRhbm4ubmV0
giJ3d3cuZW5jb3VudGVyaW5nY2hyaXN0Y2FtcGFpZ24ub3JnghB3d3cuZmF0aW1h
YnEub3JnghZ3d3cuZ3VhZGFsdXBlaG9iYnMuY29tghJ3d3cuaGZnbGVuZGFsZS5v
cmeCFHd3dy5ob2x5YW5nZWxzY2MuY29tghd3d3cuaG9seWNyb3NzYXVzdGluLm9y
Z4IVd3d3Lmljcy1uZXdtYWRyaWQuY29tgiV3d3cuam9obnBhdWwyZm91bmRhdGlv
bm9mbWljaGlnYW4uY29tghV3d3cubWFuY29pY2hpY2Fnby5vcmeCFHd3dy5uc3Vj
YXRob2xpY3Mub3JnghN3d3cub2xwaC5kaW9uZXQub3Jngg13d3cub2x2bmouY29t
gh93d3cub3VybGFkeW9mdGhlbGFrZWhhbGlmYXgub3JnghV3d3cucmNzbW9udGdv
bWVyeS5vcmeCHXd3dy5yZWdpbmFjYWVsaWFjYWRlbXlwc3Aub3JnghB3d3cuc2Fp
bnRhY2MuY29tghZ3d3cuc2FpbnRhbm5laGFtZWwub3JngiB3d3cuc2FudGFjbGFy
YWNhdGhvbGljY2h1cmNoLm9yZ4INd3d3LnNjc3dmLm9yZ4IRd3d3LnNtc2FuZ2Vs
cy5vcmeCI3d3dy5zb3V0aGVhc3Ryb2NoZXN0ZXJjYXRob2xpY3Mub3JnghN3d3cu
c3Rhbm5zdG1hcnkub3Jnght3d3cuc3RhbnRob255YmVsbGV2aWxsZS5jb22CFnd3
dy5zdGNhdGhlcmluZXNsYy5vcmeCD3d3dy5zdGdtYm5lLmNvbYIad3d3LnN0aGVs
ZW5vcmFuZ2VmaWVsZC5vcmeCEnd3dy5zdGpvaG5tYW55Lm9yZ4IYd3d3LnN0am9z
ZXBoYXRraW5zb24ub3Jnght3d3cuc3RsYXdyZW5jZWdvZmZzdG93bi5vcmeCEnd3
dy5zdG1hcmtpbmR5Lm9yZ4IVd3d3LnN0bWFyeWRlbGF2YW4ub3JnghZ3d3cuc3Rt
YXJ5Z2lsYmVydHMuY29tghh3d3cuc3RtYXJ5Z3JlZW52aWxsZS5vcmeCHnd3dy5z
dG1hcnlncmVlbnZpbGxlc2Nob29sLm9yZ4IXd3d3LnN0bWFyeW9yYW5nZS5vbmxp
bmWCGXd3dy5zdG1hcnlzY2FuYXNlcmFnYS5vcmeCE3d3dy5zdHBhdG1hZHJhcy5j
b22CGnd3dy5zdHBldGVydGhlZmlzaGVybWFuLm1lghh3d3cuc3RwaGlsaXBzcGV0
cm9saWEuY2GCHXd3dy53aWxsaWFtc3Rvd25jYXRob2xpY3Mub3JnMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA
dH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrITxfRAAABAMARjBE
AiBdG1VsycdU30NvcvqgAnDZy31tSh5LiOnZS8Hw4k8G6gIgZ5c3AUNQBe6xkuZD
1QkFG1PJNr85xZ6rYqmTWeMQwDEAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWshPF9hAAAEAwBHMEUCIQDlhCalknOpjARTFLAgKkPjsWlQFOP7
ukhS3r+k0EwbxQIgEpaqhkTAl4PRzTzBkxf+LEVdTuZ4fCvkGX4vfwA0jwowDQYJ
KoZIhvcNAQELBQADggEBAGk2QRlbOJ7Njrx7Dm2j8pGajK+CFK1MV8hZH+Z2SyCg
vKKXhpMFjAAt5MWcPzEna2bZFqiRoBMELjuY5nTBvHQq6ARFjE2MYdOyHXelh6ta
RT/8a+xYsyvd8cQwOtgt4+6yBoYl+MQtg35z8gYVKVysODBkHlhIwq27FTEdvaZE
0AO4UzQifQ5z94EYbHWMBBrT3QEs9QYs9tR7llMGmi1rgM/BU5mKAf9wNFf4I2mT
9iGIBHsHOiziKSaOeVYmvWzBGAU/Eo6sU6YGysWEWLSTmArNlywFtcBJP37ttmFS
XhruGYFlbbsezFpPtd45sAkZMm7XBE1ooJ+rabQe4+Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonmGQpl9saHzrOnk6BBF
AKkKBaeLDq1vczjaV9u1LQvdxz6RhafRJAdPNl92rtFwD1H4W13B3HPd0PXWxoDj
MXHx7kVZcDSLjoRjy199lKdtZcR7PSrLDLQyYycqgjvuVheW5OAh1+0rU5eaXiW7
67LgJoxmvN79CwMU/kaio1XbmXmejlD8szOnE4IsoVbFxpnl1yP0OHF0ZCm1UmJc
RHOQ9XRLsWYvlXQBMuhwCL9tgvKyVy1bhe0Nz7w5iqmOxmsHexvlSxDhqufk+tiY
XHHed1tb4dylDWIxbxzCQ/mD9sMwqWGSLfYlvkKI003pANfJkqKvDYUmejeOTHUT
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295286944026634460894800675630587854533225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 05:45:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 05:45:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ourladyofthelakehalifax.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20510531346105624821617438352506621467764332294077370008481773327443397064336636488002303013250869310276909283293151345871162121016321203096892983359939564907000564994958618588302664872573653667428306442211047499156254992501014705172171995313286388665431271115960369422468562154687893123682908511084108761445416989597589034039717723407591530587491539756831692792043368506819000145105231279731659917920168004826075503924662939953657124500284021186268521052697710476731325074369260326581007784012138382248736825968243476040613822552180431543918632680462043385599427486093511261443408983976197907804269189178767818691549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff289948a7a32966bb1072c9671327edf61fc6e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stipend.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephedinburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamstowncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamstowncatholics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b213c5f44000004030046304402205d1b556cc9c754df436f72faa00270d9cb7d6d4a1e4b88e9d94bc1f0e24f06ea022067973701435005eeb192e643d509051b53c936bf39c59eab62a99359e310c031007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b213c5f610000040300473045022100e58426a59273a98c045314b0202a43e3b1695014e3fbba4852debfa4d04c1bc502201296aa8644c09783d1cd3cc19317fe2c455d4ee6787c2be4197e2f7f00348f0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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