holycrossaustin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f1:61:36:9d:fb:ed:c9:39:31:5f:2a:2c:72:d2:41:2a:d0 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holycrossaustin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:61:36:9d:fb:ed:c9:39:31:5f:2a:2c:72:d2:41:2a:d0
Serial Number (int): 430586412858906821777428132275721466882768
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:1d:8d:49:11:ba:25:15:df:69:f1:1c:83:d3:8b:53:61:3d:db:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:f9:69:b7:4e:47:8b:41:22:e3:3c:a4:ed:65:b6:3d:30:9f:57:fd
Fingerprint (sha256): 8e:7b:35:41:0d:c3:b8:8d:84:c1:18:11:82:c5:83:59:e4:39:7d:7d:b8:18:2f:84:29:c5:39:92:41:da:36:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holycrossaustin.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holycrossaustin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsamarillo.org
asagr.org
ciscoholyrosary.com
cmvic.net
ctkmandan.com
duluthcathmed.org
epiphanystl.org
holycrossaustin.org
ihrc.net
jesusloveshallreign.net
kjtnet.org
mayjesuschristbepraised.com
mercycenter.com
missionsanfranciscodelaespada.org
moorestownknights.org
mountaineercatholic.com
mountcarmelsaipan.com
mystpatricks.com
olgtemple.org
ourladyofmercyhillsboro.org
ourladyoftheplains.org
queenofangelschurch.org
saintandrewwright.org
saintantoninus.org
school.morecommunity.org
st-matthias.net
stadalbertschool.net
stambroselatham.com
stbasilvallejo.org
stbrendans.net
steustachiusparish.com
stfrancis-church.org
stjulianaccf.org
stlawrencementor.org
stmatthewhou.org
stpeterlindsay.org
strichards.com
stritaparish.net
sttitus.org
stwilliams.org
swsaints.org
thebasilica.org
uscatholicmission.org
www.actsamarillo.org
www.asagr.org
www.avosa.org
www.ciscoholyrosary.com
www.cmvic.net
www.ctkmandan.com
www.duluthcathmed.org
www.epiphanystl.org
www.ihrc.net
www.jesusloveshallreign.net
www.kjtnet.org
www.mayjesuschristbepraised.com
www.mercycenter.com
www.missionsanfranciscodelaespada.org
www.moorestownknights.org
www.mountaineercatholic.com
www.mountcarmelsaipan.com
www.mystpatricks.com
www.olgtemple.org
www.ourladyofmercyhillsboro.org
www.ourladyoftheplains.org
www.queenofangelschurch.org
www.saintandrewwright.org
www.saintantoninus.org
www.st-matthias.net
www.stadalbertschool.net
www.stambroselatham.com
www.stbasilvallejo.org
www.stbrendans.net
www.steustachiusparish.com
www.stfrancis-church.org
www.stjulianaccf.org
www.stlawrencementor.org
www.stmatthewhou.org
www.stpeterlindsay.org
www.strichards.com
www.stritaparish.net
www.sttitus.org
www.stwilliams.org
www.swsaints.org
www.thebasilica.org
www.uscatholicmission.org

Other certificates including the domain name holycrossaustin.org

(limited to 100 certificates)
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
www.saintacc.com
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
www.ourladyofthelakehalifax.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org
holycrossaustin.org

Certificate

The complete raw certificate details for holycrossaustin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINKDCCDBCgAwIBAgISBPFhNp377ck5MV8qLHLSQSrQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTEwNTU1NDlaFw0x
ODA4MDkwNTU1NDlaMB4xHDAaBgNVBAMTE2hvbHljcm9zc2F1c3Rpbi5vcmcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9uZQPYxbSIBUCAsdp4oQt77h
z4BIAQx1VsvrzgcWgNAGhdjsNrK0i5I2Jo3601AvPH1wRREm32yfrtMZ/ndWqkUV
eLxhif7hpWzLUowIr8ty0vjegcConZayKGefwYLFhxrKpqjsTRriYfz3VmKMHMWS
HFC3iEv+RvP++6P/yw/IYKNkXggxnsxlFJP/VmiGYaPIHHbVC9D/bcqTI/vYFemC
Il8m7fs0Rx0XYmyRz2w/01ZFaruKYYgsU9kAYxWNGPY7BNRjcB5+DQksunO38dii
9C6pzmeALwht+JcNfEHOwNLmrhQ8MAW9BQI/bkCKyCeEBUxRh5B8W9C6B6YLAgMB
AAGjggoyMIIKLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAUdjUkRuiUV32nxHIPT
i1NhPdv1MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggczBgNVHREEggcqMIIHJoIQYWN0c2FtYXJpbGxvLm9yZ4IJYXNh
Z3Iub3JnghNjaXNjb2hvbHlyb3NhcnkuY29tggljbXZpYy5uZXSCDWN0a21hbmRh
bi5jb22CEWR1bHV0aGNhdGhtZWQub3Jngg9lcGlwaGFueXN0bC5vcmeCE2hvbHlj
cm9zc2F1c3Rpbi5vcmeCCGlocmMubmV0ghdqZXN1c2xvdmVzaGFsbHJlaWduLm5l
dIIKa2p0bmV0Lm9yZ4IbbWF5amVzdXNjaHJpc3RiZXByYWlzZWQuY29tgg9tZXJj
eWNlbnRlci5jb22CIW1pc3Npb25zYW5mcmFuY2lzY29kZWxhZXNwYWRhLm9yZ4IV
bW9vcmVzdG93bmtuaWdodHMub3Jnghdtb3VudGFpbmVlcmNhdGhvbGljLmNvbYIV
bW91bnRjYXJtZWxzYWlwYW4uY29tghBteXN0cGF0cmlja3MuY29tgg1vbGd0ZW1w
bGUub3JnghtvdXJsYWR5b2ZtZXJjeWhpbGxzYm9yby5vcmeCFm91cmxhZHlvZnRo
ZXBsYWlucy5vcmeCF3F1ZWVub2ZhbmdlbHNjaHVyY2gub3JnghVzYWludGFuZHJl
d3dyaWdodC5vcmeCEnNhaW50YW50b25pbnVzLm9yZ4IYc2Nob29sLm1vcmVjb21t
dW5pdHkub3Jngg9zdC1tYXR0aGlhcy5uZXSCFHN0YWRhbGJlcnRzY2hvb2wubmV0
ghNzdGFtYnJvc2VsYXRoYW0uY29tghJzdGJhc2lsdmFsbGVqby5vcmeCDnN0YnJl
bmRhbnMubmV0ghZzdGV1c3RhY2hpdXNwYXJpc2guY29tghRzdGZyYW5jaXMtY2h1
cmNoLm9yZ4IQc3RqdWxpYW5hY2NmLm9yZ4IUc3RsYXdyZW5jZW1lbnRvci5vcmeC
EHN0bWF0dGhld2hvdS5vcmeCEnN0cGV0ZXJsaW5kc2F5Lm9yZ4IOc3RyaWNoYXJk
cy5jb22CEHN0cml0YXBhcmlzaC5uZXSCC3N0dGl0dXMub3Jngg5zdHdpbGxpYW1z
Lm9yZ4IMc3dzYWludHMub3Jngg90aGViYXNpbGljYS5vcmeCFXVzY2F0aG9saWNt
aXNzaW9uLm9yZ4IUd3d3LmFjdHNhbWFyaWxsby5vcmeCDXd3dy5hc2Fnci5vcmeC
DXd3dy5hdm9zYS5vcmeCF3d3dy5jaXNjb2hvbHlyb3NhcnkuY29tgg13d3cuY212
aWMubmV0ghF3d3cuY3RrbWFuZGFuLmNvbYIVd3d3LmR1bHV0aGNhdGhtZWQub3Jn
ghN3d3cuZXBpcGhhbnlzdGwub3Jnggx3d3cuaWhyYy5uZXSCG3d3dy5qZXN1c2xv
dmVzaGFsbHJlaWduLm5ldIIOd3d3LmtqdG5ldC5vcmeCH3d3dy5tYXlqZXN1c2No
cmlzdGJlcHJhaXNlZC5jb22CE3d3dy5tZXJjeWNlbnRlci5jb22CJXd3dy5taXNz
aW9uc2FuZnJhbmNpc2NvZGVsYWVzcGFkYS5vcmeCGXd3dy5tb29yZXN0b3dua25p
Z2h0cy5vcmeCG3d3dy5tb3VudGFpbmVlcmNhdGhvbGljLmNvbYIZd3d3Lm1vdW50
Y2FybWVsc2FpcGFuLmNvbYIUd3d3Lm15c3RwYXRyaWNrcy5jb22CEXd3dy5vbGd0
ZW1wbGUub3Jngh93d3cub3VybGFkeW9mbWVyY3loaWxsc2Jvcm8ub3Jnghp3d3cu
b3VybGFkeW9mdGhlcGxhaW5zLm9yZ4Ibd3d3LnF1ZWVub2ZhbmdlbHNjaHVyY2gu
b3Jnghl3d3cuc2FpbnRhbmRyZXd3cmlnaHQub3JnghZ3d3cuc2FpbnRhbnRvbmlu
dXMub3JnghN3d3cuc3QtbWF0dGhpYXMubmV0ghh3d3cuc3RhZGFsYmVydHNjaG9v
bC5uZXSCF3d3dy5zdGFtYnJvc2VsYXRoYW0uY29tghZ3d3cuc3RiYXNpbHZhbGxl
am8ub3JnghJ3d3cuc3RicmVuZGFucy5uZXSCGnd3dy5zdGV1c3RhY2hpdXNwYXJp
c2guY29tghh3d3cuc3RmcmFuY2lzLWNodXJjaC5vcmeCFHd3dy5zdGp1bGlhbmFj
Y2Yub3Jnghh3d3cuc3RsYXdyZW5jZW1lbnRvci5vcmeCFHd3dy5zdG1hdHRoZXdo
b3Uub3JnghZ3d3cuc3RwZXRlcmxpbmRzYXkub3JnghJ3d3cuc3RyaWNoYXJkcy5j
b22CFHd3dy5zdHJpdGFwYXJpc2gubmV0gg93d3cuc3R0aXR1cy5vcmeCEnd3dy5z
dHdpbGxpYW1zLm9yZ4IQd3d3LnN3c2FpbnRzLm9yZ4ITd3d3LnRoZWJhc2lsaWNh
Lm9yZ4IZd3d3LnVzY2F0aG9saWNtaXNzaW9uLm9yZzCB/gYDVR0gBIH2MIHzMAgG
BmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlm
aWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVz
IGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9s
aWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkv
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFjTfv8jwAABAMARzBFAiA8oq+amZhiIMjbXH87NzzK+FT6
/jlcFSENkCIdrD6UJwIhAJpbXHds3dBy9PPRPsvgbFy7BQqSacHL9Rc5fG5yL7++
AHYA23Sv7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFjTfv8swAABAMA
RzBFAiEApcapjPZzzNacWOPoJj3VNhnoyLs64Qvo3xlqXlHIw+ICIGh8npIGy+DE
H3GnHvet/q1LBgoUnOyw0EVXJ0YUOvMcMA0GCSqGSIb3DQEBCwUAA4IBAQA/1hgr
UlKTpswlAfu+ZEuMrkNHyvKAUN6qgLtsUF0wWU2mJKQ56qTLV64A7nzxiKz9VrXM
W91Jb+j7NTJ0lSNWtehzAu6GWTf0iXsbkg5KMobAoAPV4WjRgBBjMMzMw3iquZpm
jZ8Yc8Q4x7J/bfKxqzx5oOpVGkZ+hJLO8W53OIiVSnWX8XXop0wUmgOC/6bBq7BQ
OnBGXi2+wOUx6ySkWBnx9GQo7MaZan4eLjfTkXJRgnC8778A+q37srCg28SxRlR5
Ou2ikTNVDKakJ4+0m8pX5YjZAFIL8eD2dXqEdATFCbft1lUGCeW4QfKaTTVvpKUA
YbRTJW45Ea8yN/YG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPbmUD2MW0iAVAgLHaeK
ELe+4c+ASAEMdVbL684HFoDQBoXY7DaytIuSNiaN+tNQLzx9cEURJt9sn67TGf53
VqpFFXi8YYn+4aVsy1KMCK/LctL43oHAqJ2Wsihnn8GCxYcayqao7E0a4mH891Zi
jBzFkhxQt4hL/kbz/vuj/8sPyGCjZF4IMZ7MZRST/1ZohmGjyBx21QvQ/23KkyP7
2BXpgiJfJu37NEcdF2Jskc9sP9NWRWq7imGILFPZAGMVjRj2OwTUY3Aefg0JLLpz
t/HYovQuqc5ngC8IbfiXDXxBzsDS5q4UPDAFvQUCP25AisgnhAVMUYeQfFvQugem
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430586412858906821777428132275721466882768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 05:55:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 05:55:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holycrossaustin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24864458534329423014832287643514590251166853801691995656195042583877455320109902799899039941447128618035412174964391649900116698643567066985605004653588908569930632983765446708821487053242774091348623930788683054621944191593004111113050863307297030890687041289857104710299826086346797066667299659278725525050722117952507108893806112958231320789175189044832314798332526300106107474977533814587998118992560544386276086957245107448430885076820290107270263847769885188440029139232911863466140583376893092876476709679123332580063127048521757254092408331496064427778967949838501001328703403418572251341763322982148612793867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							051d8d4911ba2515df69f11c83d38b53613ddbf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.morecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscatholicmission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actsamarillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asagr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciscoholyrosary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkmandan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthcathmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanystl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihrc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusloveshallreign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjtnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayjesuschristbepraised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionsanfranciscodelaespada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moorestownknights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountaineercatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountcarmelsaipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystpatricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgtemple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmercyhillsboro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyoftheplains.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofangelschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintandrewwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintantoninus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-matthias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadalbertschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbasilvallejo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbrendans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steustachiusparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfrancis-church.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjulianaccf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencementor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewhou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterlindsay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strichards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stritaparish.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttitus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stwilliams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasilica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uscatholicmission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634dfbfc8f000004030047304502203ca2af9a99986220c8db5c7f3b373ccaf854fafe395c15210d90221dac3e94270221009a5b5c776cddd072f4f3d13ecbe06c5cbb050a9269c1cbf517397c6e722fbfbe007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634dfbfcb30000040300473045022100a5c6a98cf673ccd69c58e3e8263dd53619e8c8bb3ae10be8df196a5e51c8c3e20220687c9e9206cbe0c41f71a71ef7adfead4b060a149cecb0d045572746143af31c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fd6182b525293a6cc2501fbbe644b8cae4347caf28050deaa80bb6c505d30594da624a439eaa4cb57ae00ee7cf188acfd56b5cc5bdd496fe8fb353274952356b5e87302ee865937f4897b1b920e4a3286c0a003d5e168d180106330ccccc378aab99a668d9f1873c438c7b27f6df2b1ab3c79a0ea551a467e8492cef16e773888954a7597f175e8a74c149a0382ffa6c1abb0503a70465e2dbec0e531eb24a45819f1f46428ecc6996a7e1e2e37d39172518270bcefbf00faadfbb2b0a0dbc4b14654793aeda29133550ca6a4278fb49bca57e588d900520bf1e0f6757a847404c509b7edd6550609e5b841f29a4d356fa4a50061b453256e3911af3237f606