www.stpeters-standrews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f9:c8:b2:e7:45:7b:7e:97:0c:24:05:3e:5b:cf:8e:15:e5 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stpeters-standrews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:c8:b2:e7:45:7b:7e:97:0c:24:05:3e:5b:cf:8e:15:e5
Serial Number (int): 433446227609094047713957214605067579954661
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:b5:1f:4b:44:df:bf:fb:35:e2:69:7a:9a:a1:fe:ba:38:fb:96:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:65:22:d0:2f:ef:be:3a:5e:8c:3d:97:ad:ff:3a:2b:61:95:24:0e
Fingerprint (sha256): 97:ce:73:6a:fc:34:22:8c:1c:51:91:85:f4:ca:cc:0f:43:12:4c:1e:24:53:6b:37:de:16:2c:21:15:af:50:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stpeters-standrews.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stpeters-standrews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arch-no.org
archdiocese-no.org
armorofgodradio.com
bensisnj.com
bensisnj.org
cathedralofstpeter.org
church.cathedralofstpeter.org
ctcatholicmen.org
ctkworc.org
fatimabq.org
fatimachurchabq.org
fatimaschoolabq.com
gbswebsitedevelopment.com
guardianangelchurch.org
hfccvic.org
holyangelscc.com
icchurchmd.org
immaculateconceptionmd.com
johnpaul2foundationofmichigan.com
ktnz.org
nativitystmary.com
ollparish.info
patdioschools.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintannehamel.org
saintmarksparish.org
saintvincentcatholicchurch.com
school.scswf.org
sjtac.org
smsangels.org
southeastrochestercatholics.org
st-peter-reserve.org
stannstmary.org
stemma.org
stgmbne.com
stjosephatkinson.org
stjosephcs.org
stjosephretreat.org
stjworker.com
stlawrencegoffstown.org
stmarycs.net
stmarydelavan.org
stmaryorange.online
stmarysbronson.org
stmichaelssunsetpark.com
stpeters-standrews.com
svdparlington.org
svdpthornliebank.org.uk
www.arch-no.org
www.archdiocese-no.org
www.armorofgodradio.com
www.bensisnj.com
www.bensisnj.org
www.cathedralofstpeter.org
www.catholic.tulane.edu
www.cc.blessedsacramentnc.org
www.ctcatholicmen.org
www.ctkworc.org
www.fatimabq.org
www.fatimaschoolabq.com
www.gbswebsitedevelopment.com
www.holyangelscc.com
www.icchurchmd.org
www.immaculateconceptionmd.com
www.johnpaul2foundationofmichigan.com
www.ktnz.org
www.ollparish.info
www.olss-no.com
www.ourschool.stpaulkensington.org
www.parish.ckseattle.org
www.rceducation.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintannehamel.org
www.saintmarksparish.org
www.saintvincentcatholicchurch.com
www.school.ckseattle.org
www.school.simonandjude.org
www.servantsofcharity.org
www.sjtac.org
www.smsangels.org
www.smsdsj.org
www.southeastrochestercatholics.org
www.st-peter-reserve.org
www.stannstmary.org
www.stemma.org
www.stgmbne.com
www.stjosephatkinson.org
www.stjosephretreat.org
www.stjworker.com
www.stlawrencegoffstown.org
www.stmarydelavan.org
www.stmaryorange.online
www.stmarysbronson.org
www.stmichaelssunsetpark.com
www.stpeters-standrews.com
www.svdparlington.org

Other certificates including the domain name stpeters-standrews.com

(limited to 100 certificates)
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
www.stpeters-standrews.com
www.stpeters-standrews.com
stpeters-standrews.com
cchelpnj.org
stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
cchelpnj.org
www.stpeters-standrews.com

Certificate

The complete raw certificate details for www.stpeters-standrews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVjvWT6NOA9v/z1O0Wh+
+exdyY894kKI+SQsKAipunHKkdVb6xdtBnfXrrtv1lLx2IBYz+pZ+RNQOixB3Mzc
+p7ZncvHT4RAuQfCaNdoJMnjcCM9QAG1BM9ltgTVwzvFoYcD2Kak1rytjg9c4cQt
Rb0YMqY0Dd4NWbD9GNqKQSta6w4Co4H2E71gZ9wVUna7tce4o0QdODLsbkjRE/HD
5mfc2sT1DIq2vACDVtcpMS8IrQE41yrBzswLZpVHCe+l4cc+vTeRvGaLSmYPEh/u
BoTyYH/uIyV3ENsw/4VFNZY2dEk36QROtPI8fkzEYjzZo/CrHp3c6kKpeVZqCfOG
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433446227609094047713957214605067579954661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 18:06:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 18:06:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stpeters-standrews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24912801539391241175624917702483731287321602699485821443546285232301135324576295371954568313964259535205405917978207199437527920707479484406835024296347818930042250234630292462508948886066123610236215207017425646418074729532916356960737598732247020346776042026787341311892659840859560138750935805938254252749047772878210366029261581739379156070765937760967097511293946192520575421017287204354990247979637747695993047183228642376492072237520937446390506619434064439313613745698394685742663382250306824284479205972667515659134788526987581836596477746433890794364656544114088240208097306533976437632458716713284644603467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72b51f4b44dfbffb35e2697a9aa1feba38fb969d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archdiocese-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctcatholicmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctkworc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimachurchabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbswebsitedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardianangelchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfccvic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icchurchmd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculateconceptionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitystmary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollparish.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patdioschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarksparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintvincentcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjtac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-peter-reserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephretreat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarycs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysbronson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelssunsetpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeters-standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdparlington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdpthornliebank.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arch-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archdiocese-no.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armorofgodradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic.tulane.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.blessedsacramentnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctcatholicmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctkworc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolabq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gbswebsitedevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icchurchmd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculateconceptionmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollparish.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olss-no.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourschool.stpaulkensington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.ckseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rceducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarksparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintvincentcatholicchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.ckseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.simonandjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servantsofcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjtac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsdsj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-peter-reserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephretreat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjworker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysbronson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelssunsetpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeters-standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdparlington.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056ca0d12d2bfa9f7524ba611b448fa633fe7c482cfc20561fd97f89d31364be54429a63bf736e0861cd63d3db308b76e7627f9a3f8636eef04cbb59013eaa4ed49ec8b2510243bf7176cdd1b11a2659883341103c55e92ba4de614b1f36265de5ab4234a212304549006e01a7e276edf21209e4da4a4014b22d8e9526ccb8e5f7a565923507ba751bdc9c77ce78571f5b8fafb3cfdadaded6b200f84e91cba8446f9d490d9a053b3b7058b8e5b4cdb4dfd8941a0962df628abc5ccf5f75a23b3fd6a376b7005c65305c5ba854b4bc5fd2c4a3fc5b791169f7c86f9a913a7f4a333681c476ca9bbb2e3c4d5da98358eae1508966dcdec13367480ec7911a8f9df