www.ourladyofthelakehalifax.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:7a:3f:10:88:40:9a:ce:96:50:3d:56:23:14:a2:f5:00 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ourladyofthelakehalifax.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:7a:3f:10:88:40:9a:ce:96:50:3d:56:23:14:a2:f5:00
Serial Number (int): 277832904672987211567900293934523722429696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:3a:7f:62:29:6f:a7:df:3c:97:91:44:3d:dc:8b:a4:40:0a:99:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:d9:4b:e1:88:9b:a4:57:ea:84:f2:dd:12:86:99:2f:6e:4b:2c:6e
Fingerprint (sha256): e1:89:e6:0f:48:f7:03:95:60:5c:e8:36:5c:bb:33:f8:98:0d:1b:23:ed:f4:42:a1:ca:ce:41:3d:21:f9:c0:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ourladyofthelakehalifax.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ourladyofthelakehalifax.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

attackabv.com
bensisnj.com
blessedsacramentwv.org
cathedralofstpeter.org
christtheteacher.org
churchofsaintann.net
encounteringchristcampaign.org
fatimabq.org
hfglendale.org
holyangelscc.com
ics-newmadrid.com
johnpaul2foundationofmichigan.com
mancoichicago.org
nsucatholics.org
olph.dionet.org
olvnj.com
ourladyofthelakehalifax.org
rcsmontgomery.org
reginacaeliacademypsp.org
saintacc.com
saintannehamel.org
santaclaracatholicchurch.org
school.stambroselatham.com
scswf.org
smsangels.org
southeastrochestercatholics.org
stannstmary.org
stanthonybelleville.com
stcatherineslc.org
stgmbne.com
sthelenorangefield.org
stipend.stambroselatham.com
stjohnmany.org
stjosephatkinson.org
stjosephedinburg.org
stlawrencegoffstown.org
stmarkindy.org
stmarydelavan.org
stmarygilberts.com
stmarygreenville.org
stmarygreenvilleschool.org
stmaryorange.online
stmaryscanaseraga.org
stpatmadras.com
stpeterthefisherman.me
stphilipspetrolia.ca
williamstowncatholics.org
www.attackabv.com
www.bensisnj.com
www.blessedsacramentwv.org
www.cathedralofstpeter.org
www.christtheteacher.org
www.churchofsaintann.net
www.encounteringchristcampaign.org
www.fatimabq.org
www.hfglendale.org
www.holyangelscc.com
www.holycrossaustin.org
www.ics-newmadrid.com
www.johnpaul2foundationofmichigan.com
www.mancoichicago.org
www.nsucatholics.org
www.olph.dionet.org
www.olvnj.com
www.ourladyofthelakehalifax.org
www.rcsmontgomery.org
www.reginacaeliacademypsp.org
www.saintacc.com
www.saintannehamel.org
www.santaclaracatholicchurch.org
www.scswf.org
www.smsangels.org
www.southeastrochestercatholics.org
www.stannstmary.org
www.stanthonybelleville.com
www.stcatherineslc.org
www.stgmbne.com
www.sthelenorangefield.org
www.stjohnmany.org
www.stjosephatkinson.org
www.stlawrencegoffstown.org
www.stmarkindy.org
www.stmarydelavan.org
www.stmarygilberts.com
www.stmarygreenville.org
www.stmarygreenvilleschool.org
www.stmaryorange.online
www.stmaryscanaseraga.org
www.stpatmadras.com
www.stpeterthefisherman.me
www.stphilipspetrolia.ca
www.williamstowncatholics.org

Other certificates including the domain name ourladyofthelakehalifax.org

(limited to 100 certificates)
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
servantsofcharity.org
servantsofcharity.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org
www.ourladyofthelakehalifax.org

Certificate

The complete raw certificate details for www.ourladyofthelakehalifax.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVNfesaBMJg6zjQlR2nT
onYIZ7Yamgdr9fcM8UoljL9M8e7T80oBFm7rvhL8r0L3F9mBKEaSdsMHF7cDZBN0
9rSAjDCtK3hd6X9kQBpprkvtUXUEqv8T1z1jKE/YHWftcTjDgv5+FdhlgHAtftTq
Jx+rkmu4ooLFuX8BmN9+1uKBxXJRVHeqKP/2S3zqYc3dtfldYeewI3ZftMaFOR85
gHcjNvqhDBSA7EFd6ACenUmefFvacfgHZKF35LRzqkfrU2UjtSUxBd0tRIUh9XgP
+ouT3h+0aXVfNl9zZBL6LSR5Vk8V1+YvNaP37xEKJ96MD3dvTtSZ7dI+Uc5K4cwq
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277832904672987211567900293934523722429696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 05:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 05:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ourladyofthelakehalifax.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22385292721388938644088173737261415514126304044143148424682352912292559139143146650654347358244069279216768733929935246063011908228081927726020793234363065292057259154703653698361071653617641253999578269028587439594799617136216864123818967193778510510137435490338365358284953200748685340013873129058170363321436934081033757985844756339178331263747751395926450719830522750387418723905703282218087080336184677451578101515517583714870550885929940159921124962426274230213033085559203846107760749914914083445339386810126718372755133311498319181771955651779382256410148180792888817576641341080220505141304800379905285827103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							403a7f62296fa7df3c9791443ddc8ba4400a99d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stipend.stambroselatham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephedinburg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williamstowncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attackabv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensisnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathedralofstpeter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christtheteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchofsaintann.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encounteringchristcampaign.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimabq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfglendale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyangelscc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrossaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ics-newmadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnpaul2foundationofmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mancoichicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olph.dionet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olvnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofthelakehalifax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcsmontgomery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reginacaeliacademypsp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintacc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintannehamel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santaclaracatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scswf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smsangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southeastrochestercatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannstmary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonybelleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcatherineslc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stgmbne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthelenorangefield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnmany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephatkinson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlawrencegoffstown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarkindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarydelavan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygilberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarygreenvilleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryorange.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscanaseraga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatmadras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterthefisherman.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stphilipspetrolia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.williamstowncatholics.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3df9727700000403004630440220237a294b4afd2ec9a4a2b8de9b419088d5903f04bc0741d824e43f7c873a880c02204d08f9ed89a22ff8ce12314e1a70dfe5df0b3c19c1cb61371478e369ce9d6dbd007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3df974790000040300483046022100972be8579a7179f3dd47da1b617e7539b05b69b4fd8b6aba56478f17e4437fa5022100fb2432109801ffe5755ce2ce429d49b11d90b433aed350dc79f3a98c41974034
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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