cathymillercancerfund.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:93:33:5b:2c:97:56:7d:88:74:2c:e9:72:89:ba:8c:ca was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cathymillercancerfund.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:93:33:5b:2c:97:56:7d:88:74:2c:e9:72:89:ba:8c:ca
Serial Number (int): 289775957421470950196703793889626688228554
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:34:2b:d4:8a:f6:f6:40:81:94:93:9c:e7:ef:77:61:03:42:3e:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:e7:ac:c5:44:04:73:34:f6:85:a9:e4:15:e1:0c:63:6b:89:79:ee
Fingerprint (sha256): 99:d3:7b:1a:54:ef:fe:63:22:03:29:ac:06:b5:bf:d0:69:89:00:9d:01:bf:a1:42:f1:d5:f4:0f:92:2b:23:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cathymillercancerfund.org

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cathymillercancerfund.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actstulsachapter.org
aganaarch.org
australiancatholicstudents.org
bunnellcarmelites.org
bvefdn.org
catholic-sf.org
catholicschoolparentsri.org
catholicteacherscollege.org
cathymillercancerfund.org
filelawfirm.com
holycrosscatholicschool.org
holycrosspreschoolbatavia.org
icclibertytx.org
kofc10122.org
kpihradio.com
livingstoncatholicparishes.co.uk
okvalleycatholicparishes.org
queenofpeacepatton.org
sacredheartlittlefield.org
saintaloysius.org
saintelizabeths.org
saintleonard.uk
saintmarkspittsfield.org
santateresabryan.com
schooloffaithomaha.com
seas-school.org
seascs.net
servantsofcharity.org
sfarch.org
shspec.org
sistersofdivinemercy.org
smcparishdallas.org
stewardshiparchdiosf.org
stjamesrockford.com
stjandstp.com
stjoseph-cc.org
stjudecatholicchurchstl.org
stmarymagdaleneflint.org
stmaryshr.org
stmarysp.church
stmarystjoseph.org
stmcentral.org
stmelgin.org
stmichaeloakgrove.church
ststephensmidland.com
sttheo.org
stvincentchurchfamily.com
svdplancasteroh.com
www.actstulsachapter.org
www.aganaarch.org
www.australiancatholicstudents.org
www.bunnellcarmelites.org
www.bvefdn.org
www.catholic-sf.org
www.catholicschoolparentsri.org
www.catholicteacherscollege.org
www.filelawfirm.com
www.holycrosscatholicschool.org
www.holycrosspreschoolbatavia.org
www.icclibertytx.org
www.kofc10122.org
www.kpihradio.com
www.livingstoncatholicparishes.co.uk
www.okvalleycatholicparishes.org
www.queenofpeacepatton.org
www.sacredheartlittlefield.org
www.saintaloysius.org
www.saintelizabeths.org
www.saintleonard.uk
www.saintmarkspittsfield.org
www.santateresabryan.com
www.schooloffaithomaha.com
www.seas-school.org
www.seascs.net
www.servantsofcharity.org
www.sfarch.org
www.shspec.org
www.sistersofdivinemercy.org
www.smcparishdallas.org
www.stewardshiparchdiosf.org
www.stjamesrockford.com
www.stjandstp.com
www.stjoseph-cc.org
www.stjudecatholicchurchstl.org
www.stmarymagdaleneflint.org
www.stmaryshr.org
www.stmarysp.church
www.stmarystjoseph.org
www.stmcentral.org
www.stmelgin.org
www.stmichaeloakgrove.church
www.ststephensmidland.com
www.sttheo.org
www.stvincentchurchfamily.com
www.svdplancasteroh.com

Other certificates including the domain name cathymillercancerfund.org

(limited to 100 certificates)
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.kc2557.org
cathymillercancerfund.org
www.kc2557.org
cathymillercancerfund.org
www.sfbsf.org
www.kc2557.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.kc2557.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
www.kc2557.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
www.kc2557.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
www.kc2557.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
ascsnb.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
ascsnb.org
cathymillercancerfund.org
www.kc2557.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org
cathymillercancerfund.org
cathymillercancerfund.org
cathymillercancerfund.org
www.sfbsf.org
cathymillercancerfund.org
www.sfbsf.org
www.sfbsf.org
www.sfbsf.org

Certificate

The complete raw certificate details for cathymillercancerfund.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus97qOgZcUwh22iOIq2s
HWGItXoIiaLbLVEs3oE4QRA63LgQU1gCTswDTVZVPuzgDeE1UUFDwZIMdLFguFU0
eeJDZAmt5MoNBEWcGUm35QRknMa4UEBxkdQ/aDaB+nYYxXksgm3J0LCAkzeWvNv/
NRjy312ZJCpQf1NsaPe/8Si9NuoV+Ri7FqK0lDbIT61uj7HYgzgHGcsZ5sIDOskc
dCRatbPD2nqN3Jgaz6Fqznbp8QjJaVyAMmXj+W59MGe5R44N685/GTgir04046oU
appgnOWb6WljPQnyuE3d6fst7IzT1THHJbhIx582e9WCku2k+vAA907txo7Ld/9O
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289775957421470950196703793889626688228554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-19 05:50:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 05:50:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cathymillercancerfund.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23582638426983409605084220876833582575419949920605104135566771874821139561567893252734899578198508039157265568282784402761201440225831033628202110195205653755740207442758437830082879229153126841473979084013472409704928706544571643317227441572397037684274137512298532765209838624008998989181974279554695565691147194573996079779598612861607601959007251115426046334048012629370674344331063568938034454559297698278910667850620964396956608510851081601853744068636068573355960609223130613039533199338771157346312673157473435952296583002816267028926110367039570471830730686594258800675725591845806200840387921422009136795391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a342bd48af6f6408194939ce7ef776103423ed2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actstulsachapter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aganaarch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiancatholicstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunnellcarmelites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvefdn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholic-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicschoolparentsri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicteacherscollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathymillercancerfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filelawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrosscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrosspreschoolbatavia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icclibertytx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kofc10122.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpihradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingstoncatholicparishes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okvalleycatholicparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofpeacepatton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartlittlefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintaloysius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintelizabeths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintleonard.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarkspittsfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santateresabryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schooloffaithomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seascs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servantsofcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfarch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shspec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistersofdivinemercy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smcparishdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewardshiparchdiosf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjandstp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph-cc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudecatholicchurchstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarymagdaleneflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryshr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysp.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarystjoseph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmcentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmelgin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaeloakgrove.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ststephensmidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentchurchfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdplancasteroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actstulsachapter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aganaarch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiancatholicstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunnellcarmelites.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bvefdn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholic-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicschoolparentsri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicteacherscollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filelawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrosscatholicschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrosspreschoolbatavia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icclibertytx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kofc10122.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kpihradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingstoncatholicparishes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okvalleycatholicparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofpeacepatton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartlittlefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintaloysius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintelizabeths.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintleonard.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarkspittsfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santateresabryan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schooloffaithomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seas-school.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seascs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servantsofcharity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfarch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shspec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sistersofdivinemercy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcparishdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewardshiparchdiosf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjamesrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjandstp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoseph-cc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudecatholicchurchstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarymagdaleneflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryshr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysp.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarystjoseph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmcentral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmelgin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaeloakgrove.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ststephensmidland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sttheo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvincentchurchfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdplancasteroh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001637729e1800000040300473045022100dd7e28d1e46911fc5c1c90a8bf9a8ce286dbebb42784379850432d1ea68309c40220392867e709b5029ff2a8dc0e8a39b54796790010754a06520406d676e5a7ba0f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001637729e18f00000403004630440220609dea43b3add64fd9501064998e6983535624fd92b92df7aaa189238c3e5fc702205588f435e790aa1fa64722d915f39c9e352eb7a8270636a47bbf0038a015f994
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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