www.nsucatholic.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:b3:ea:9e:b3:ec:6c:50:eb:f1:19:e6:7e:18:ad:dd:ae was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nsucatholic.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:b3:ea:9e:b3:ec:6c:50:eb:f1:19:e6:7e:18:ad:dd:ae
Serial Number (int): 313979492328691388279611521538461671480750
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:7e:16:77:9a:31:80:dd:79:0c:40:6f:08:75:2d:71:2a:66:bb:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:6d:61:69:80:97:d5:55:54:a9:77:a3:ef:85:94:59:4d:f1:7c:0f
Fingerprint (sha256): e8:b6:ae:f0:5e:07:d7:28:49:c7:84:12:a4:a1:18:fe:94:f8:14:63:0a:91:df:5e:e1:77:0c:ea:36:69:1b:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nsucatholic.org

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nsucatholic.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

16jda.com
angelsinavenue.org
bismarckfertilitycare.com
cfook.org
church.stfrancisxavier.com
cpswc.org
fcjcoh.net
holyfamilyaston.org
holyfamilyfranklinton.org
holyfamilytopeka.net
holynativitypayson.org
icuctn.org
lambtoncatholic.ca
lcsaints.org
lightofchristacademy.org
lumenchristiparish.org
nsucatholic.org
ourladylebanon.com
portocharities.org
ramann.art
sacbstx.org
sacredheartnorco.org
saintanthonysnm.org
saldelatierrat.com
sbdallas.org
school.stfrancisxavier.com
smdpchurch.org
stagnesofbohemia.org
stanncass.com
stanncatholicschool.com
stannlafayette.org
staugustinehighland.org
stclarehouston.org
stedwardbowie.com
stjoachimpittsville.com
stjosephdg.org
stjosephscatholicchurch-manor.org
stjudebmt.org
stjudechalfont.org
stmartindeporreschurch.org
stpaulakron.org
stpaulparishakron.org
stpeterswaldorf.org
svdpsmg.org
www.16jda.com
www.angelsinavenue.org
www.bismarckfertilitycare.com
www.cfook.org
www.cpswc.org
www.fcjcoh.net
www.holyfamilyaston.org
www.holyfamilyfranklinton.org
www.holyfamilytopeka.net
www.holynativitypayson.org
www.icuctn.org
www.lambtoncatholic.ca
www.lcsaints.org
www.lightofchristacademy.org
www.lumenchristiparish.org
www.nsucatholic.org
www.ourladyguadalupefw.org
www.ourladylebanon.com
www.portocharities.org
www.ramann.art
www.sacbstx.org
www.sacredheartnorco.org
www.saintanthonysnm.org
www.saldelatierrat.com
www.sbdallas.org
www.smdpchurch.org
www.stagnesofbohemia.org
www.stanncass.com
www.stanncatholicschool.com
www.stannlafayette.org
www.staugustinehighland.org
www.stclarehouston.org
www.stedwardbowie.com
www.stjoachimpittsville.com
www.stjosephdg.org
www.stjosephscatholicchurch-manor.org
www.stjudebmt.org
www.stjudechalfont.org
www.stmartindeporreschurch.org
www.stpaulakron.org
www.stpaulparishakron.org
www.stpeterswaldorf.org
www.svdpsmg.org

Other certificates including the domain name nsucatholic.org

(limited to 100 certificates)
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
nsucatholic.org
ourladyguadalupefw.org
www.nsucatholic.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org

Certificate

The complete raw certificate details for www.nsucatholic.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBib6Sd+MVKpD1npavZq
7uCrhB1hg+eQECf3j58F78Fpncu+F9iqB/cvLiMAVbwh9jAg0ZLx3h5mn1yaVJY5
3lxuFTqyv2g6vkPtLddO7h7canUigrSeaklKtMAVqqclQ48FeFwdg4pqDXArzA6k
DSbA3ax6bir8fWaH3ng/qGMPuyaubWUOLldmwcmUcsuC7QGiQ/idJ14y4jSGTgKx
rsjldURzYK/Q745sFiO6/WPAl22Izmg3e/HT2/kDHuv09++pTprVeqRlcFVzIHZ6
UPUjV27FQeppV9o2L56V6Np4V1E5D/g5VlvalLG2pDs3C5N1+XT+2AFF8tvBaD1v
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313979492328691388279611521538461671480750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 05:28:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 05:28:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nsucatholic.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24754842936549950952506448739508937143392839224606560713046563180760365442349819648346146875165275982064016843965350890934403299883309466276968465918086804164274205022479952518362659242758199776365722803119333968228545736811517211223966209831554718328951962713199687246102967828673327344835150540023181484515824781611601984746579584612446538081635819391212251428954826449702482268323454731517822836638703695193114737662918735746642536033393221022674839154125822535682298443289232860454944630935960533804521066750706627497249181700859536278262467293520122903225002364399686070611484680972162206028483296579701828317001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f7e16779a3180dd790c406f08752d712a66bb7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'church.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stfrancisxavier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svdpsmg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.16jda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angelsinavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bismarckfertilitycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpswc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcjcoh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyaston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyfranklinton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilytopeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynativitypayson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icuctn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lambtoncatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcsaints.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightofchristacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsucatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyguadalupefw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladylebanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portocharities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramann.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacbstx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartnorco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintanthonysnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saldelatierrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smdpchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnesofbohemia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanncatholicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannlafayette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staugustinehighland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclarehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardbowie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjoachimpittsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephdg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephscatholicchurch-manor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudebmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjudechalfont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmartindeporreschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulparishakron.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterswaldorf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svdpsmg.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001688dfeb2820000040300473045022100fb034aa9aa1d23f944ff029ff3b0b392d9a13d17e3fac977ea8a07b87c9ca6ff02203b16acd25538ba1691edbf8a05f9ac98291d749529a895b8665522f78ce439ca00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688dfeb28f000004030046304402207ec06db93a89f744b0791520834ce0dea30faff90356b8e5290fb2d08df1e4e9022074971bf74b1bb7fa0e75d730f784783aca465e376fbf747ce24a5b1cb65eb19f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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