stjosephok.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:59:12:9f:3e:17:24:f8:6e:6e:0c:12:21:f9:19:87:c6:73 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stjosephok.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:12:9f:3e:17:24:f8:6e:6e:0c:12:21:f9:19:87:c6:73
Serial Number (int): 378759027321472230317719946606250740401779
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:0a:4e:93:24:75:67:cf:5f:2d:54:07:36:52:6a:ff:74:d3:5a:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:1f:72:a1:24:ed:c5:26:c2:60:a0:61:13:39:61:de:e9:cd:ed:08
Fingerprint (sha256): ad:3e:ec:9e:35:04:6e:ab:de:3f:21:d2:f6:91:74:5b:c8:c6:2b:0f:13:3b:bd:79:07:b2:9d:23:1d:f8:75:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stjosephok.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjosephok.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actscommunityoflubbock.org
actshouston.org
annunciationfrankfort.org
catholicottawa.ca
catholiqueottawa.ca
ccapeo.org
deleitededios.org
eng.alexandria-cornwall.ca
fr.alexandria-cornwall.ca
holyrosary.edu
holyrosarychurch.us
holyspiritrochester.org
htccd.org
icomparish.org
jpgacademy.org
littleportion.org
manchestermedjugorjecentre.org
mpregional.org
nativitymary.org
nativitymen.org
ncaddhm.org
olpmn.org
peoriacursillo.org
peoriatec.org
preciousbloodssm.com
saintedward.org
saintjosephsacramento.org
saintpriscilla.org
school.olpmn.org
sfayouth.net
sjcherndon.org
smdpcatholic.com
solthaitimission.org
stanneslodi.org
staopcs.org
stjoan.net
stjosepheppingnh.com
stjosephok.com
stjosephparish.com
stjsa.org
stm-ou.org
stmarycctc.org
stmarylanesville.org
stmarysalton.com
stmarysdowntown.org
stmichaelparish.org
stmichaelsauburn.com
stsusanna.org
www.actscommunityoflubbock.org
www.actshouston.org
www.annunciationfrankfort.org
www.catholicottawa.ca
www.catholiqueottawa.ca
www.ccapeo.org
www.deleitededios.org
www.holyrosary.edu
www.holyrosarychurch.us
www.holyspiritrochester.org
www.htccd.org
www.icomparish.org
www.jpgacademy.org
www.littleportion.org
www.manchestermedjugorjecentre.org
www.mpregional.org
www.nativitymary.org
www.nativitymen.org
www.ncaddhm.org
www.olpmn.org
www.peoriacursillo.org
www.peoriatec.org
www.preciousbloodssm.com
www.saintedward.org
www.saintjosephsacramento.org
www.saintpriscilla.org
www.school.olpmn.org
www.sfayouth.net
www.sjascs.org
www.sjcherndon.org
www.smdpcatholic.com
www.solthaitimission.org
www.stanneslodi.org
www.staopcs.org
www.stjoan.net
www.stjosepheppingnh.com
www.stjosephparish.com
www.stjsa.org
www.stm-ou.org
www.stmarycctc.org
www.stmarylanesville.org
www.stmarysalton.com
www.stmarysdowntown.org
www.stmichaelparish.org
www.stmichaelsauburn.com
www.stsusanna.org
www.youth2000usa.org
youth2000usa.org

Other certificates including the domain name stjosephok.com

(limited to 100 certificates)
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjohnchrysostom.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
andrewcc.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
hoxieseguinparishes.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
stjosephok.com
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org
www.franciscansistersofmaryimmaculate.net
www.annunciation-ottawa.org

Certificate

The complete raw certificate details for stjosephok.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1NxVfpLR3786vM1Iz5g
XklyburS69ktbYXSI9QE2EJ7tUWndO8454GeTgLFGU6uugYvIgs1dgys/QJOxROZ
3VmA0u6MRz6gfPNh0BniQna3wdXuN4fQ08O1qDi6gV/pXZI4PUmQ0H2YFsc6NJxT
py4FsOYTas6ceBiRcI7J/nS4fafPqisYAUw8XlUuWSYCZzF7M/o89LomsjldQhqs
zaK62aPpESadBFUuSJNqeGD9UQmQlmgDuxQqSqUWNuQdpB62r41TB8J5E8WhfOyL
G/fFTzek02dXudP/F4Hae/TYoKU0oOO+RmKCPTIJ1KaFW/q+y+r5F4c/7vvJdEvw
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378759027321472230317719946606250740401779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-10 18:37:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 18:37:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjosephok.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25667523046012267284976309300725370253673232932565482140452096225655737555464046472416641889619887441771465288191457152832949181794698469326307622440510030933427991167717931874617558650220054624236746658211454248390495873176665062753640911133240971672568854399204150580984127873408383773422530311424813047888851953657698973750120724088669358396229507254995485485601211074299014168555511670083491564516931543381836745333406655525677113811549898427315573230631695422382521414337784510987490396096801149212638955769875616410634547383521088647676116270927096092889166220316416682771782032107330202903607986059956825354409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa0a4e93247567cf5f2d540736526aff74d35a95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actscommunityoflubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actshouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleitededios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.alexandria-cornwall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.alexandria-cornwall.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosarychurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htccd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpgacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littleportion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manchestermedjugorjecentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaddhm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoriacursillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoriatec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintedward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjosephsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpriscilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcherndon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smdpcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanneslodi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staopcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosepheppingnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarycctc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysdowntown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichaelsauburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stsusanna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actscommunityoflubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actshouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfrankfort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholiqueottawa.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccapeo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleitededios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosarychurch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyspiritrochester.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htccd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icomparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpgacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littleportion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchestermedjugorjecentre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpregional.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nativitymen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncaddhm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriacursillo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoriatec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preciousbloodssm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintedward.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosephsacramento.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpriscilla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.olpmn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfayouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjascs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjcherndon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smdpcatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solthaitimission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanneslodi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staopcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosepheppingnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stm-ou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarycctc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarylanesville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarysdowntown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmichaelsauburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stsusanna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youth2000usa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youth2000usa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162b10fc41c0000040300473045022100fa27bd35561e5fac6618a41b74a357ebac9cdf2d42c0d856d9a9ba9f579b0425022025bb520c75707405627685e98eabe0fd8d2fd06168f0cf983f38d1b88900ec370076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000162b10fc49700000403004730450221008bb7250386137d19072cba203c33e274c31066facbc8390662dad28410119af902201401b0fbb5f15a64b3bbd665153fa2245d0112e280feeefabb51aba4032fe96f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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