www.ourladyofthelakehalifax.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:59:49:0f:2d:9e:69:5f:fa:5d:49:36:aa:c6:65:8a:60 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ourladyofthelakehalifax.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:59:49:0f:2d:9e:69:5f:fa:5d:49:36:aa:c6:65:8a:60
Serial Number (int): 262476385533189523275290151347399992642144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:e8:b0:b3:54:91:05:e0:30:1e:06:d2:a1:ce:c1:40:cc:ae:0b:7a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:22:78:a4:75:b3:16:4e:7b:15:80:16:b2:c0:13:42:22:51:6f:9b
Fingerprint (sha256): a2:e3:80:f2:73:50:8e:ef:b7:40:78:32:51:fb:c8:65:1a:05:65:ef:d9:a9:ea:8f:7b:96:2e:12:c8:71:68:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ourladyofthelakehalifax.org

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ourladyofthelakehalifax.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

attackabv.com
bensisnj.com
blessedsacramentwv.org
cathedralofstpeter.org
christtheteacher.org
churchofsaintann.net
encounteringchristcampaign.org
fatimabq.org
guadalupehobbs.com
hfglendale.org
holyangelscc.com
ics-newmadrid.com
johnpaul2foundationofmichigan.com
mancoichicago.org
nsucatholics.org
olph.dionet.org
olvnj.com
ourladyofthelakehalifax.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintacc.com
saintannehamel.org
santaclaracatholicchurch.org
school.stambroselatham.com
scswf.org
smsangels.org
southeastrochestercatholics.org
stannstmary.org
stanthonybelleville.com
stcatherineslc.org
stgmbne.com
sthelenorangefield.org
stipend.stambroselatham.com
stjohnmany.org
stjosephatkinson.org
stjosephedinburg.org
stlawrencegoffstown.org
stmarkindy.org
stmarydelavan.org
stmarygilberts.com
stmarygreenville.org
stmarygreenvilleschool.org
stmaryorange.online
stmaryscanaseraga.org
stpatmadras.com
stpeterthefisherman.me
stphilipspetrolia.ca
williamstowncatholics.org
www.attackabv.com
www.bensisnj.com
www.blessedsacramentwv.org
www.cathedralofstpeter.org
www.christtheteacher.org
www.churchofsaintann.net
www.encounteringchristcampaign.org
www.fatimabq.org
www.guadalupehobbs.com
www.hfglendale.org
www.holyangelscc.com
www.holycrossaustin.org
www.ics-newmadrid.com
www.johnpaul2foundationofmichigan.com
www.mancoichicago.org
www.nsucatholics.org
www.olph.dionet.org
www.olvnj.com
www.ourladyofthelakehalifax.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintacc.com
www.saintannehamel.org
www.santaclaracatholicchurch.org
www.scswf.org
www.smsangels.org
www.southeastrochestercatholics.org
www.stannstmary.org
www.stanthonybelleville.com
www.stcatherineslc.org
www.stgmbne.com
www.sthelenorangefield.org
www.stjohnmany.org
www.stjosephatkinson.org
www.stlawrencegoffstown.org
www.stmarkindy.org
www.stmarydelavan.org
www.stmarygilberts.com
www.stmarygreenville.org
www.stmarygreenvilleschool.org
www.stmaryorange.online
www.stmaryscanaseraga.org
www.stpatmadras.com
www.stpeterthefisherman.me
www.stphilipspetrolia.ca
www.williamstowncatholics.org

Other certificates including the domain name ourladyofthelakehalifax.org

(limited to 100 certificates)
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org

Certificate

The complete raw certificate details for www.ourladyofthelakehalifax.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINzDCCDLSgAwIBAgISAwNZSQ8tnmlf+l1JNqrGZYpgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MzAwNTQ0MDJaFw0x
OTA3MjkwNTQ0MDJaMCoxKDAmBgNVBAMTH3d3dy5vdXJsYWR5b2Z0aGVsYWtlaGFs
aWZheC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN9vY4Bw1
WCd62tW5qUiW4plNlOyv4E7R+YWPhe3Vfwvip9a6YZfqm4Ag9cjk6NITsDDLsG07
bR+/39pTfT2N1UQvDfSK3bPdL2brqer0JjHK6NYokPvLPxH9Vqs8pd6w9TLS9UkZ
PPC5X0Ekfcn3Q9MV1Xf8eIhwRa3fYaJs1FbvTh4dJUkW63Zhw3D1NEcMxDdQn5LO
qQZyw1NaBfrBqpBcDth6CjmzZoLkvXv6dWFzABORX08zmDV878UzW4RcEs9lX9FL
PGrfZHNy3noqpd/rcXnUn7mhU/Y7P76jB9j3fGhB1CT5T4vFi7AIxf6Uk5v4LJaC
AI7ng4J1pIpZAgMBAAGjggrKMIIKxjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKDo
sLNUkQXgMB4G0qHOwUDMrgt6MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggh/BgNVHREEggh2MIIIcoINYXR0YWNrYWJ2
LmNvbYIMYmVuc2lzbmouY29tghZibGVzc2Vkc2FjcmFtZW50d3Yub3JnghZjYXRo
ZWRyYWxvZnN0cGV0ZXIub3JnghRjaHJpc3R0aGV0ZWFjaGVyLm9yZ4IUY2h1cmNo
b2ZzYWludGFubi5uZXSCHmVuY291bnRlcmluZ2NocmlzdGNhbXBhaWduLm9yZ4IM
ZmF0aW1hYnEub3JnghJndWFkYWx1cGVob2Jicy5jb22CDmhmZ2xlbmRhbGUub3Jn
ghBob2x5YW5nZWxzY2MuY29tghFpY3MtbmV3bWFkcmlkLmNvbYIham9obnBhdWwy
Zm91bmRhdGlvbm9mbWljaGlnYW4uY29tghFtYW5jb2ljaGljYWdvLm9yZ4IQbnN1
Y2F0aG9saWNzLm9yZ4IPb2xwaC5kaW9uZXQub3JngglvbHZuai5jb22CG291cmxh
ZHlvZnRoZWxha2VoYWxpZmF4Lm9yZ4IRcmNzbW9udGdvbWVyeS5vcmeCGXJlZ2lu
YWNhZWxpYWNhZGVteXBzcC5vcmeCDHNhaW50YWNjLmNvbYISc2FpbnRhbm5laGFt
ZWwub3JnghxzYW50YWNsYXJhY2F0aG9saWNjaHVyY2gub3JnghpzY2hvb2wuc3Rh
bWJyb3NlbGF0aGFtLmNvbYIJc2Nzd2Yub3Jngg1zbXNhbmdlbHMub3Jngh9zb3V0
aGVhc3Ryb2NoZXN0ZXJjYXRob2xpY3Mub3Jngg9zdGFubnN0bWFyeS5vcmeCF3N0
YW50aG9ueWJlbGxldmlsbGUuY29tghJzdGNhdGhlcmluZXNsYy5vcmeCC3N0Z21i
bmUuY29tghZzdGhlbGVub3JhbmdlZmllbGQub3JnghtzdGlwZW5kLnN0YW1icm9z
ZWxhdGhhbS5jb22CDnN0am9obm1hbnkub3JnghRzdGpvc2VwaGF0a2luc29uLm9y
Z4IUc3Rqb3NlcGhlZGluYnVyZy5vcmeCF3N0bGF3cmVuY2Vnb2Zmc3Rvd24ub3Jn
gg5zdG1hcmtpbmR5Lm9yZ4IRc3RtYXJ5ZGVsYXZhbi5vcmeCEnN0bWFyeWdpbGJl
cnRzLmNvbYIUc3RtYXJ5Z3JlZW52aWxsZS5vcmeCGnN0bWFyeWdyZWVudmlsbGVz
Y2hvb2wub3JnghNzdG1hcnlvcmFuZ2Uub25saW5lghVzdG1hcnlzY2FuYXNlcmFn
YS5vcmeCD3N0cGF0bWFkcmFzLmNvbYIWc3RwZXRlcnRoZWZpc2hlcm1hbi5tZYIU
c3RwaGlsaXBzcGV0cm9saWEuY2GCGXdpbGxpYW1zdG93bmNhdGhvbGljcy5vcmeC
EXd3dy5hdHRhY2thYnYuY29tghB3d3cuYmVuc2lzbmouY29tghp3d3cuYmxlc3Nl
ZHNhY3JhbWVudHd2Lm9yZ4Iad3d3LmNhdGhlZHJhbG9mc3RwZXRlci5vcmeCGHd3
dy5jaHJpc3R0aGV0ZWFjaGVyLm9yZ4IYd3d3LmNodXJjaG9mc2FpbnRhbm4ubmV0
giJ3d3cuZW5jb3VudGVyaW5nY2hyaXN0Y2FtcGFpZ24ub3JnghB3d3cuZmF0aW1h
YnEub3JnghZ3d3cuZ3VhZGFsdXBlaG9iYnMuY29tghJ3d3cuaGZnbGVuZGFsZS5v
cmeCFHd3dy5ob2x5YW5nZWxzY2MuY29tghd3d3cuaG9seWNyb3NzYXVzdGluLm9y
Z4IVd3d3Lmljcy1uZXdtYWRyaWQuY29tgiV3d3cuam9obnBhdWwyZm91bmRhdGlv
bm9mbWljaGlnYW4uY29tghV3d3cubWFuY29pY2hpY2Fnby5vcmeCFHd3dy5uc3Vj
YXRob2xpY3Mub3JnghN3d3cub2xwaC5kaW9uZXQub3Jngg13d3cub2x2bmouY29t
gh93d3cub3VybGFkeW9mdGhlbGFrZWhhbGlmYXgub3JnghV3d3cucmNzbW9udGdv
bWVyeS5vcmeCHXd3dy5yZWdpbmFjYWVsaWFjYWRlbXlwc3Aub3JnghB3d3cuc2Fp
bnRhY2MuY29tghZ3d3cuc2FpbnRhbm5laGFtZWwub3JngiB3d3cuc2FudGFjbGFy
YWNhdGhvbGljY2h1cmNoLm9yZ4INd3d3LnNjc3dmLm9yZ4IRd3d3LnNtc2FuZ2Vs
cy5vcmeCI3d3dy5zb3V0aGVhc3Ryb2NoZXN0ZXJjYXRob2xpY3Mub3JnghN3d3cu
c3Rhbm5zdG1hcnkub3Jnght3d3cuc3RhbnRob255YmVsbGV2aWxsZS5jb22CFnd3
dy5zdGNhdGhlcmluZXNsYy5vcmeCD3d3dy5zdGdtYm5lLmNvbYIad3d3LnN0aGVs
ZW5vcmFuZ2VmaWVsZC5vcmeCEnd3dy5zdGpvaG5tYW55Lm9yZ4IYd3d3LnN0am9z
ZXBoYXRraW5zb24ub3Jnght3d3cuc3RsYXdyZW5jZWdvZmZzdG93bi5vcmeCEnd3
dy5zdG1hcmtpbmR5Lm9yZ4IVd3d3LnN0bWFyeWRlbGF2YW4ub3JnghZ3d3cuc3Rt
YXJ5Z2lsYmVydHMuY29tghh3d3cuc3RtYXJ5Z3JlZW52aWxsZS5vcmeCHnd3dy5z
dG1hcnlncmVlbnZpbGxlc2Nob29sLm9yZ4IXd3d3LnN0bWFyeW9yYW5nZS5vbmxp
bmWCGXd3dy5zdG1hcnlzY2FuYXNlcmFnYS5vcmeCE3d3dy5zdHBhdG1hZHJhcy5j
b22CGnd3dy5zdHBldGVydGhlZmlzaGVybWFuLm1lghh3d3cuc3RwaGlsaXBzcGV0
cm9saWEuY2GCHXd3dy53aWxsaWFtc3Rvd25jYXRob2xpY3Mub3JnMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA
4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFqbPxpSAAABAMARzBF
AiEAlqhjzGl5vVMyXsTh4wOJ2qFElsTEFnWKwL5CSsKwcgECIEsEbZsuY/GIPD8l
4GwhltGprrpjd1UKszKyowsFaV+pAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm
OLHHaFRL2I0AAAFqbPxpbAAABAMARjBEAiBnLLocQ5yktmVYpuzaYF4CkWhE3Oeu
zqthnriz3EG7HAIgaKI9WfcNIe1pC4lEP1pMTAqHqecTGsODVBLLm65t7WIwDQYJ
KoZIhvcNAQELBQADggEBADxsBwBvqcn1YKhs/3Ocj2Yk7swucIWfU7tYQvXUTyvf
KkGEFyF1yJcQs7BRFwzgh1t6haihdvqJYyR0lANJ97MgYDyg4g3lZNBHGeCwmej2
fzMr5WB+ruuIZCl5NS4GUSfLnoDj/f8gevwSBsCNxEFHBhbzasOkD6ybliBYwNdA
AhKDeg+R620I8+jz58WYnbxQah5HurbPXKTM6slw/keccEKybvpiRKxt/iMYRrDx
AI85JJvXFVaN0DvzbdJTbW5xC+3iXwnq8E78K1Fcia5p1iG0zkKdwIRL5BrObRy5
I6mENwX9dV/ucH9+IQR70p76C9eycoq27IZYA2ScshY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zfb2OAcNVgnetrVualI
luKZTZTsr+BO0fmFj4Xt1X8L4qfWumGX6puAIPXI5OjSE7Awy7BtO20fv9/aU309
jdVELw30it2z3S9m66nq9CYxyujWKJD7yz8R/VarPKXesPUy0vVJGTzwuV9BJH3J
90PTFdV3/HiIcEWt32GibNRW704eHSVJFut2YcNw9TRHDMQ3UJ+SzqkGcsNTWgX6
waqQXA7Yego5s2aC5L17+nVhcwATkV9PM5g1fO/FM1uEXBLPZV/RSzxq32Rzct56
KqXf63F51J+5oVP2Oz++owfY93xoQdQk+U+LxYuwCMX+lJOb+CyWggCO54OCdaSK
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262476385533189523275290151347399992642144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 05:44:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 05:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ourladyofthelakehalifax.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26663827337889185942691386929743487493185222362094285130224126891444009352547641990205321526301832390203069733644325703452351596529081431891736727962779016587423613385647789747434696521040887805476155938896551077710576441805817723622094366788142517923481608399870655545703134414894179267794927265419966179904317207626370032573176583121293884113583861477505887984563306058145981065885764513947376384885690002183575845159710190505863265184950336493188411811719388608294065147195006927363895635853640919330684285020089751080170139430831760084569652147198603008352893033849695114965776083046625319106135755866636441389657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0e8b0b3549105e0301e06d2a1cec140ccae0b7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stipend.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephedinburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamstowncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalupehobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamstowncatholics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a6cfc6948000004030047304502210096a863cc6979bd53325ec4e1e30389daa14496c4c416758ac0be424ac2b0720102204b046d9b2e63f1883c3f25e06c2196d1a9aeba6377550ab332b2a30b05695fa900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a6cfc696c00000403004630440220672cba1c439ca4b66558a6ecda605e02916844dce7aeceab619eb8b3dc41bb1c022068a23d59f70d21ed690b89443f5a4c4c0a87a9e7131ac3835412cb9bae6ded62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c6c07006fa9c9f560a86cff739c8f6624eecc2e70859f53bb5842f5d44f2bdf2a4184172175c89710b3b051170ce0875b7a85a8a176fa89632474940349f7b320603ca0e20de564d04719e0b099e8f67f332be5607eaeeb88642979352e065127cb9e80e3fdff207afc1206c08dc441470616f36ac3a40fac9b962058c0d7400212837a0f91eb6d08f3e8f3e7c5989dbc506a1e47bab6cf5ca4cceac970fe479c7042b26efa6244ac6dfe231846b0f1008f39249bd715568dd03bf36dd2536d6e710bede25f09eaf04efc2b515c89ae69d621b4ce429dc0844be41ace6d1cb923a9843705fd755fee707f7e21047bd29efa0bd7b2728ab6ec865803649cb216