www.annunciation-ottawa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:80:58:b5:ba:e5:35:71:bb:75:ef:ac:35:76:40:15:d0 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.annunciation-ottawa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:80:58:b5:ba:e5:35:71:bb:75:ef:ac:35:76:40:15:d0
Serial Number (int): 300299649415775258237267894771569393669584
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:78:e5:86:63:5e:03:5d:e9:0f:dc:55:62:4b:92:82:4e:ea:b8:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:44:9f:76:2d:f1:28:f5:4f:42:a4:a0:f6:35:91:5e:44:6e:3c:e5
Fingerprint (sha256): 95:03:e4:76:47:0e:c8:46:08:95:e5:9f:e3:84:d9:7e:ca:37:0f:bd:76:f6:1b:0d:d6:62:79:b2:21:3b:10:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.annunciation-ottawa.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.annunciation-ottawa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewcc.org
annunciation-ottawa.org
annunciationfrankfort.org
assumptionspokane.org
catholicottawa.ca
catholiqueottawa.ca
cookevillestthomas.org
divinemercyschuyler.com
hlitanzania.org
holynamechurch.org
holyrosaryfrenstat.com
holyspiritrochester.org
hoxieseguinparishes.org
kofc14700.org
nativitymen.org
npcatholic.org
olacuba.org
olgchurch.net
ologflint.org
ourladyofmtcarmelfairfieldca.org
paloaltocatholic.net
preciousbloodssm.com
qofa.org
saintagnesparish.org
saintleorcc.com
saintmichaelschurch.net
slywaco.org
solthaitimission.org
spsh.ca
sspbandj.org
st-patrick-parish.com
sta-sj.ca
stagnescatholicparish.com
stanthonyloyal.org
stbedechurchhay.org
stcharlesonline.org
stedschurch.org
stjeromeclute.org
stjohnalvin.org
stjohnchrysostom.com
stjosephok.com
stjsa.org
stm-ou.org
stmarylanesville.org
stmaryscaldwell.com
stmarywaverly.org
stmax.org
viamariaconsulting.com
www.andrewcc.org
www.annunciation-ottawa.org
www.annunciationfrankfort.org
www.assumptionspokane.org
www.catholicottawa.ca
www.catholiqueottawa.ca
www.cookevillestthomas.org
www.divinemercyschuyler.com
www.hlitanzania.org
www.holynamechurch.org
www.holyrosaryfrenstat.com
www.holyspiritrochester.org
www.hoxieseguinparishes.org
www.kofc14700.org
www.nativitymen.org
www.npcatholic.org
www.olacuba.org
www.olgchurch.net
www.ologflint.org
www.ourladyofmtcarmelfairfieldca.org
www.paloaltocatholic.net
www.preciousbloodssm.com
www.qofa.org
www.saintagnesparish.org
www.saintleorcc.com
www.saintmichaelschurch.net
www.slywaco.org
www.solthaitimission.org
www.spsh.ca
www.sspbandj.org
www.st-patrick-parish.com
www.sta-sj.ca
www.stagnescatholicparish.com
www.stanthonyloyal.org
www.stbedechurchhay.org
www.stcharlesonline.org
www.stedschurch.org
www.stjeromeclute.org
www.stjohnalvin.org
www.stjohnchrysostom.com
www.stjosephok.com
www.stjsa.org
www.stm-ou.org
www.stmarylanesville.org
www.stmaryscaldwell.com
www.stmarywaverly.org
www.stmax.org
www.viamariaconsulting.com

Other certificates including the domain name annunciation-ottawa.org

(limited to 100 certificates)
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net

Certificate

The complete raw certificate details for www.annunciation-ottawa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGbv0ScPFoSOgdi+KGGc
I8Mhfoylhjljuq7zKENlVSw6WJOeBn34LrY2b3a6xZ37219XDkYtUvig72dFHxPo
8CTchwPIk20m+Covkm1XnIb/Eelw4K2uG55fLyX/FyJ7iTV4FuVeBeiEOpy7R6Dt
tFMgC+PMLmyOEwG53+fq44x7xl+TQbm+NR+koDBSujUrIIv0rRK44nzmeDqc4Frl
N5NNSh5WR0165bCAGhPBrDE1bu1aU5uOmn5NaQIqLgK6fcVcbi/frdExpYsl3kEQ
5GnlDzwcXL2ATAe9M9rsTvgi/36ZMk6gCBCHe2sDdx1qhG5+QtN6uiF6jZezKLND
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300299649415775258237267894771569393669584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 05:41:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 05:41:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.annunciation-ottawa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23278608134371528519396672244877602783875879128769490060433922355866862134615023573357469398564355741530245127868149875870363908346331320478295669131872776283435381824374666219671079747167896169135594828722324921938100877178937171868066514105218918892804491403997021824075721839488825454899831418005859640661970915221229322767267533017551387828436702594306484550477180551902924108904092162636520127705583347684627042599061042701554153346532856204960672167657529614553516129609107487124354998694397782994354847797953549749907428458860339544636954704415689105474032916849865353819222246276752025029400514551565417399109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b378e586635e035de90fdc55624b92824eeab8cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viamariaconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viamariaconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016642f58d0d0000040300473045022026a04e105147bc609b4338b3dd6ff14b0ec1fb1f5f73c784baa41e9abc91a246022100ba53970af01650d110c915d24ad9b34fbcf53ec1352fa9431703dc4b60fa9a63007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016642f58d22000004030047304502203947e7d27b2c401c4800246eea29a1d02037ace83d2f149c803378b78823c1c5022100d2e40aa0bf1d0e73cc16895d0248cb3042bac6ccee4df9b0f2225fbbd04cfbca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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