www.franciscansistersofmaryimmaculate.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:46:59:54:f7:62:d9:75:9d:27:93:7d:67:d0:dd:56:61:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.franciscansistersofmaryimmaculate.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:59:54:f7:62:d9:75:9d:27:93:7d:67:d0:dd:56:61:15
Serial Number (int): 372387651873654485929095271105327520964885
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:88:e8:e1:55:09:6e:b4:bb:da:61:b0:4d:26:a5:b3:33:c2:7f:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:fc:4f:14:3e:da:0b:be:65:80:6b:59:e6:60:ea:43:62:ca:71:62
Fingerprint (sha256): ed:ec:8b:09:72:e8:6a:70:7e:12:90:9d:49:5c:d4:3c:46:90:fd:0d:7c:1c:be:fe:6d:35:5e:00:6d:92:14:1c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.franciscansistersofmaryimmaculate.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.franciscansistersofmaryimmaculate.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewcc.org
annunciation-ottawa.org
assumptionspokane.org
cookevillestthomas.org
divinemercyschuyler.com
franciscansistersofmaryimmaculate.net
hlitanzania.org
holycrossbaycity.org
holynamechurch.org
holyrosaryfrenstat.com
hoxieseguinparishes.org
immaculatasfo.org
kathleenswartzmcquaig.com
kofc14700.org
npcatholic.org
olacuba.org
olgchurch.net
ologflint.org
ourladyofmtcarmelfairfieldca.org
paloaltocatholic.net
qofa.org
saintagnesparish.org
saintleorcc.com
saintmichaelschurch.net
school.ckseattle.org
silcc.org
sistersofmarymotherofthechurch.org
slywaco.org
spsh.ca
sspbandj.org
st-bart.org
st-justin.org
st-patrick-parish.com
sta-sj.ca
stagnescatholicparish.com
stannpeoria.com
stanthonyloyal.org
stbedechurchhay.org
stcharlesonline.org
stedschurch.org
stjeromeclute.org
stjohnalvin.org
stjohnchrysostom.com
stmaryscaldwell.com
stmarywaverly.org
stmax.org
stpatrickslubbock.org
stpeterparish.com
truecrossschool.org
viamariaconsulting.com
www.andrewcc.org
www.annunciation-ottawa.org
www.assumptionspokane.org
www.cookevillestthomas.org
www.divinemercyschuyler.com
www.franciscansistersofmaryimmaculate.net
www.hlitanzania.org
www.holycrossbaycity.org
www.holynamechurch.org
www.holyrosaryfrenstat.com
www.hoxieseguinparishes.org
www.immaculatasfo.org
www.kathleenswartzmcquaig.com
www.kofc14700.org
www.npcatholic.org
www.olacuba.org
www.olgchurch.net
www.ologflint.org
www.ourladyofmtcarmelfairfieldca.org
www.paloaltocatholic.net
www.qofa.org
www.saintagnesparish.org
www.saintleorcc.com
www.saintmichaelschurch.net
www.silcc.org
www.sistersofmarymotherofthechurch.org
www.slywaco.org
www.spsh.ca
www.sspbandj.org
www.st-bart.org
www.st-justin.org
www.st-patrick-parish.com
www.sta-sj.ca
www.stagnescatholicparish.com
www.stannpeoria.com
www.stanthonyloyal.org
www.stbedechurchhay.org
www.stcharlesonline.org
www.stedschurch.org
www.stjeromeclute.org
www.stjohnalvin.org
www.stjohnchrysostom.com
www.stjosephok.com
www.stmaryscaldwell.com
www.stmarywaverly.org
www.stmax.org
www.stpatrickslubbock.org
www.stpeterparish.com
www.truecrossschool.org
www.viamariaconsulting.com

Other certificates including the domain name franciscansistersofmaryimmaculate.net

(limited to 100 certificates)
www.smmcs.org
franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
franciscansistersofmaryimmaculate.net
franciscansistersofmaryimmaculate.net
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.smmcs.org
www.franciscansistersofmaryimmaculate.net
www.franciscansistersofmaryimmaculate.net
www.smmcs.org

Certificate

The complete raw certificate details for www.franciscansistersofmaryimmaculate.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINljCCDH6gAwIBAgISBEZZVPdi2XWdJ5N9Z9DdVmEVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEyMDIwNTA4NTRaFw0x
ODAzMDIwNTA4NTRaMDQxMjAwBgNVBAMTKXd3dy5mcmFuY2lzY2Fuc2lzdGVyc29m
bWFyeWltbWFjdWxhdGUubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HRcRelG6u/xPUOnpDGf994Ntej0xLhFTlblslez+T00493w77mXubuBRvxb
yxMU+9oNrg6g5fJMz4FFkcU1alnem2ZEiFWfrhpfvxS78kMS7sorhInTVQhAIX/r
TgG4OsSG0WFPW0oAL6NcZ8rSujiriuG/jpMlvmHY91wKKcaVHXqcukKDUBwixAVJ
+ZoAC9ZUk6qJixhCGG2TVeEOsMJqEcotnlQPUaHylFsKP+h8lMrq8PW2FM94AJNM
a86f50Z3Bn3z2XelPtyDfDS5RQAYUe+YXFJqNOpwtYgPAKEh6tGtsnVLXae7GYvo
HUyMQTS8sJl1xcSnBgYxgQlEwwIDAQABo4IKijCCCoYwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBTCiOjhVQlutLvaYbBNJqWzM8J/3DAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIIkwYDVR0RBIIIijCCCIaC
DGFuZHJld2NjLm9yZ4IXYW5udW5jaWF0aW9uLW90dGF3YS5vcmeCFWFzc3VtcHRp
b25zcG9rYW5lLm9yZ4IWY29va2V2aWxsZXN0dGhvbWFzLm9yZ4IXZGl2aW5lbWVy
Y3lzY2h1eWxlci5jb22CJWZyYW5jaXNjYW5zaXN0ZXJzb2ZtYXJ5aW1tYWN1bGF0
ZS5uZXSCD2hsaXRhbnphbmlhLm9yZ4IUaG9seWNyb3NzYmF5Y2l0eS5vcmeCEmhv
bHluYW1lY2h1cmNoLm9yZ4IWaG9seXJvc2FyeWZyZW5zdGF0LmNvbYIXaG94aWVz
ZWd1aW5wYXJpc2hlcy5vcmeCEWltbWFjdWxhdGFzZm8ub3JnghlrYXRobGVlbnN3
YXJ0em1jcXVhaWcuY29tgg1rb2ZjMTQ3MDAub3Jngg5ucGNhdGhvbGljLm9yZ4IL
b2xhY3ViYS5vcmeCDW9sZ2NodXJjaC5uZXSCDW9sb2dmbGludC5vcmeCIG91cmxh
ZHlvZm10Y2FybWVsZmFpcmZpZWxkY2Eub3JnghRwYWxvYWx0b2NhdGhvbGljLm5l
dIIIcW9mYS5vcmeCFHNhaW50YWduZXNwYXJpc2gub3Jngg9zYWludGxlb3JjYy5j
b22CF3NhaW50bWljaGFlbHNjaHVyY2gubmV0ghRzY2hvb2wuY2tzZWF0dGxlLm9y
Z4IJc2lsY2Mub3JngiJzaXN0ZXJzb2ZtYXJ5bW90aGVyb2Z0aGVjaHVyY2gub3Jn
ggtzbHl3YWNvLm9yZ4IHc3BzaC5jYYIMc3NwYmFuZGoub3JnggtzdC1iYXJ0Lm9y
Z4INc3QtanVzdGluLm9yZ4IVc3QtcGF0cmljay1wYXJpc2guY29tgglzdGEtc2ou
Y2GCGXN0YWduZXNjYXRob2xpY3BhcmlzaC5jb22CD3N0YW5ucGVvcmlhLmNvbYIS
c3RhbnRob255bG95YWwub3JnghNzdGJlZGVjaHVyY2hoYXkub3JnghNzdGNoYXJs
ZXNvbmxpbmUub3Jngg9zdGVkc2NodXJjaC5vcmeCEXN0amVyb21lY2x1dGUub3Jn
gg9zdGpvaG5hbHZpbi5vcmeCFHN0am9obmNocnlzb3N0b20uY29tghNzdG1hcnlz
Y2FsZHdlbGwuY29tghFzdG1hcnl3YXZlcmx5Lm9yZ4IJc3RtYXgub3JnghVzdHBh
dHJpY2tzbHViYm9jay5vcmeCEXN0cGV0ZXJwYXJpc2guY29tghN0cnVlY3Jvc3Nz
Y2hvb2wub3JnghZ2aWFtYXJpYWNvbnN1bHRpbmcuY29tghB3d3cuYW5kcmV3Y2Mu
b3Jnght3d3cuYW5udW5jaWF0aW9uLW90dGF3YS5vcmeCGXd3dy5hc3N1bXB0aW9u
c3Bva2FuZS5vcmeCGnd3dy5jb29rZXZpbGxlc3R0aG9tYXMub3Jnght3d3cuZGl2
aW5lbWVyY3lzY2h1eWxlci5jb22CKXd3dy5mcmFuY2lzY2Fuc2lzdGVyc29mbWFy
eWltbWFjdWxhdGUubmV0ghN3d3cuaGxpdGFuemFuaWEub3Jnghh3d3cuaG9seWNy
b3NzYmF5Y2l0eS5vcmeCFnd3dy5ob2x5bmFtZWNodXJjaC5vcmeCGnd3dy5ob2x5
cm9zYXJ5ZnJlbnN0YXQuY29tght3d3cuaG94aWVzZWd1aW5wYXJpc2hlcy5vcmeC
FXd3dy5pbW1hY3VsYXRhc2ZvLm9yZ4Idd3d3LmthdGhsZWVuc3dhcnR6bWNxdWFp
Zy5jb22CEXd3dy5rb2ZjMTQ3MDAub3JnghJ3d3cubnBjYXRob2xpYy5vcmeCD3d3
dy5vbGFjdWJhLm9yZ4IRd3d3Lm9sZ2NodXJjaC5uZXSCEXd3dy5vbG9nZmxpbnQu
b3JngiR3d3cub3VybGFkeW9mbXRjYXJtZWxmYWlyZmllbGRjYS5vcmeCGHd3dy5w
YWxvYWx0b2NhdGhvbGljLm5ldIIMd3d3LnFvZmEub3Jnghh3d3cuc2FpbnRhZ25l
c3BhcmlzaC5vcmeCE3d3dy5zYWludGxlb3JjYy5jb22CG3d3dy5zYWludG1pY2hh
ZWxzY2h1cmNoLm5ldIINd3d3LnNpbGNjLm9yZ4Imd3d3LnNpc3RlcnNvZm1hcnlt
b3RoZXJvZnRoZWNodXJjaC5vcmeCD3d3dy5zbHl3YWNvLm9yZ4ILd3d3LnNwc2gu
Y2GCEHd3dy5zc3BiYW5kai5vcmeCD3d3dy5zdC1iYXJ0Lm9yZ4IRd3d3LnN0LWp1
c3Rpbi5vcmeCGXd3dy5zdC1wYXRyaWNrLXBhcmlzaC5jb22CDXd3dy5zdGEtc2ou
Y2GCHXd3dy5zdGFnbmVzY2F0aG9saWNwYXJpc2guY29tghN3d3cuc3Rhbm5wZW9y
aWEuY29tghZ3d3cuc3RhbnRob255bG95YWwub3Jnghd3d3cuc3RiZWRlY2h1cmNo
aGF5Lm9yZ4IXd3d3LnN0Y2hhcmxlc29ubGluZS5vcmeCE3d3dy5zdGVkc2NodXJj
aC5vcmeCFXd3dy5zdGplcm9tZWNsdXRlLm9yZ4ITd3d3LnN0am9obmFsdmluLm9y
Z4IYd3d3LnN0am9obmNocnlzb3N0b20uY29tghJ3d3cuc3Rqb3NlcGhvay5jb22C
F3d3dy5zdG1hcnlzY2FsZHdlbGwuY29tghV3d3cuc3RtYXJ5d2F2ZXJseS5vcmeC
DXd3dy5zdG1heC5vcmeCGXd3dy5zdHBhdHJpY2tzbHViYm9jay5vcmeCFXd3dy5z
dHBldGVycGFyaXNoLmNvbYIXd3d3LnRydWVjcm9zc3NjaG9vbC5vcmeCGnd3dy52
aWFtYXJpYWNvbnN1bHRpbmcuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm
BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg
b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg
aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg
YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN
AQELBQADggEBAFtqdhA8GGQo1Y6yIdYPyRP0TgCW+ZW2YVn+mZlT7BjmmuDjaXbi
8u9ADNGlHfa6g32Xxn6yWNgmaYUxKwxk8/2GfHT67tehBT34UTNhaMsy3JHHbdZu
kNb1XQVsKVLZ8jrEA6qQ9zsi3S+eEvj1txGLApXtHE71bR/b79yjETAu2dLazPA8
/StyY1CrBfxXmWC+rzqh9k3fHKzAMIYCmTLascQtpzDDR/8lkXG7tuEf9ao2MZz5
Bdi9pBoPa5n22NiSaAbDwVXrmiwVhZo6xaPHcfFM7MLp7YC+vWwldZByfiZAFkhw
O1y4Av1ubWF3RCgjV+x/CYpv7hKOSFJaNiI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HRcRelG6u/xPUOnpDGf
994Ntej0xLhFTlblslez+T00493w77mXubuBRvxbyxMU+9oNrg6g5fJMz4FFkcU1
alnem2ZEiFWfrhpfvxS78kMS7sorhInTVQhAIX/rTgG4OsSG0WFPW0oAL6NcZ8rS
ujiriuG/jpMlvmHY91wKKcaVHXqcukKDUBwixAVJ+ZoAC9ZUk6qJixhCGG2TVeEO
sMJqEcotnlQPUaHylFsKP+h8lMrq8PW2FM94AJNMa86f50Z3Bn3z2XelPtyDfDS5
RQAYUe+YXFJqNOpwtYgPAKEh6tGtsnVLXae7GYvoHUyMQTS8sJl1xcSnBgYxgQlE
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372387651873654485929095271105327520964885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 05:08:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 05:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.franciscansistersofmaryimmaculate.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26314946905334686178064840926188152333700715280262123808253322984129427483396224479065139764362265165051525580980248004743795895420275597480091431267610397945284910454038201547222282714301688846880205534950217792013851175652731568955340847418499722283938428464563542732213716584170954446161197554606797095252286855312576045529850276371364951293612948566546928760040919783391224433748678392895812748049714192080150304861001692760342862128851379712994877714858406270801872323219501279401146611262576471343808687378510757693583488646621599290421638280786682940024761997559407459532357349167070802549032590083197072131267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c288e8e155096eb4bbda61b04d26a5b333c27fdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franciscansistersofmaryimmaculate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holycrossbaycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immaculatasfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathleenswartzmcquaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.ckseattle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistersofmarymotherofthechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-bart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-justin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stannpeoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickslubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpeterparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truecrossschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viamariaconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andrewcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciation-ottawa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assumptionspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookevillestthomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.divinemercyschuyler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franciscansistersofmaryimmaculate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hlitanzania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holycrossbaycity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyrosaryfrenstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoxieseguinparishes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immaculatasfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathleenswartzmcquaig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kofc14700.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olacuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olgchurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ologflint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofmtcarmelfairfieldca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloaltocatholic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qofa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintagnesparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintleorcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmichaelschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sistersofmarymotherofthechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slywaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spsh.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sspbandj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-bart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-justin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-patrick-parish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sta-sj.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagnescatholicparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stannpeoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthonyloyal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbedechurchhay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcharlesonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedschurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjeromeclute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnalvin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnchrysostom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryscaldwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarywaverly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickslubbock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpeterparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truecrossschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viamariaconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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