www.school.lumenchristiparish.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:02:6c:bc:cd:79:9a:1d:89:17:1f:0c:86:83:5d:fd:1d was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.school.lumenchristiparish.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:02:6c:bc:cd:79:9a:1d:89:17:1f:0c:86:83:5d:fd:1d
Serial Number (int): 318167236124502167733565277176872688287005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:23:5c:cb:e4:65:c0:8b:29:43:37:86:16:ab:1d:a8:93:2c:b3:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:8d:22:62:13:26:b6:41:29:4a:53:3c:2e:78:46:bb:b2:31:b5:64
Fingerprint (sha256): f2:42:68:ff:f8:65:f7:42:78:7d:1a:1c:bb:f8:d4:e4:6a:39:e4:6f:f2:29:b4:ff:3e:fe:35:d8:a9:ee:4c:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.school.lumenchristiparish.org

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.school.lumenchristiparish.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annunciationfaithformation.org
madisonvocations.org
maryqueenofpeace.net
mow-town.org
mucnm.com
newcastlecorpuschristi.org
nighttoshinestillwater.com
ollonline.com
ourladyofangels.org
perpetualifecare.org
popnova.org
prek.stmarysparish.org
sainthenrychicago.org
school.lumenchristiparish.org
sktparish.org
standrewdh.org
staroftheseastcharles.org
stbernardcville.org
stedwardbowie.org
stellamarischurch.org
stmarymilford.org
stmarypc.com
stpatrickportsulphur.com
www.annunciationfaithformation.org
www.madisonvocations.org
www.maryqueenofpeace.net
www.mucnm.com
www.newcastlecorpuschristi.org
www.nighttoshinestillwater.com
www.ollonline.com
www.ourladyofangels.org
www.parish.stanthony-clarksville.org
www.perpetualifecare.org
www.popnova.org
www.prek.stmarysparish.org
www.sainthenrychicago.org
www.school.iccsonline.org
www.school.lumenchristiparish.org
www.sktparish.org
www.standrewdh.org
www.staroftheseastcharles.org
www.stbernardcville.org
www.stedwardbowie.org
www.stellamarischurch.org
www.stmarymilford.org
www.stmarypc.com
www.stpatrickportsulphur.com

Other certificates including the domain name lumenchristiparish.org

(limited to 100 certificates)
www.school.lumenchristiparish.org
mail.lumenchristiparish.org
school.lumenchristiparish.org
ourladyguadalupefw.org
school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
mail.lumenchristiparish.org
annunciationfaithformation.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
mail.lumenchristiparish.org
mail.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
www.sacbstx.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
www.nsucatholic.org
annunciationfaithformation.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.sacbstx.org
school.lumenchristiparish.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
school.lumenchristiparish.org
ourladyguadalupefw.org
school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.nsucatholic.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
annunciationfaithformation.org
www.nsucatholic.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.nsucatholic.org
mail.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.nsucatholic.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
www.lumenchristiparish.org
ourladyguadalupefw.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
ourladyguadalupefw.org
ourladyguadalupefw.org
mail.lumenchristiparish.org
www.school.lumenchristiparish.org
www.school.lumenchristiparish.org
mail.lumenchristiparish.org
ourladyguadalupefw.org

Certificate

The complete raw certificate details for www.school.lumenchristiparish.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uFrSBquLtgsF7O9C25v
QGERHEqijPGWS4LRuMv4bjJnoXq44q8oKT5aEuqleowxQ7+va+a4K5sFWt7UW318
/GMe/ySEbw6XB50nyLy16P6l2zC8pXEI1rEr9WjxyYO1216k1Ie1crszmy6i0pVT
43GcgtZh+51nhbj0i81ANMZsJe1kRlpgbhL4vVrWnFMnqDIoVC2qNTTJgSgqByXa
tT0xwqBcEJ9oKEv8KhNbU7rNpe/rv3GDGeGCqrQ/LeODTQBXbRf51GzqMVaTXKbf
SuUx06ndA3LayahZtFa+htqLWOa0mz57b1JjldgoewlVyL2s9OPNV8met4inczKq
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318167236124502167733565277176872688287005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-26 05:34:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-24 05:34:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.school.lumenchristiparish.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29650921647894396269318114289785383190438613988133191496614032966642005441317344759119622657628656479990038216225673580861111883044056021653381395078825519365924596690596148061875467334949850579502654189904585589590709778942634411768837755321497712587621904600127183316193545545822879916913617786392783249100507832920557173822493148918350171360778396027553470520562429445355880857954084365758470903951336147534610345927710474148410532262756679630477994357916504556575516976954489965370426935781276356564442652472189493849348336954093980675477109826502753895093419734733781293522917382262363427783519932081884733024849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08235ccbe465c08b2943378616ab1da8932cb38c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annunciationfaithformation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonvocations.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryqueenofpeace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mow-town.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mucnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastlecorpuschristi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nighttoshinestillwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ollonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourladyofangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perpetualifecare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popnova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prek.stmarysparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainthenrychicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sktparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standrewdh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staroftheseastcharles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbernardcville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardbowie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stellamarischurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarymilford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatrickportsulphur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annunciationfaithformation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonvocations.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryqueenofpeace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mucnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcastlecorpuschristi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nighttoshinestillwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ollonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourladyofangels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parish.stanthony-clarksville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perpetualifecare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popnova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prek.stmarysparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainthenrychicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.iccsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.lumenchristiparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sktparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standrewdh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staroftheseastcharles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stbernardcville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stedwardbowie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stellamarischurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarymilford.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpatrickportsulphur.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016574f12327000004030047304502206b04f45bc0f31c87004464a8f38bc5af1b0e063a68d7a6e01ede3b1dc2433838022100e2b3a0f55eebfb2c5f78495a9221df35ee30aba1c5bc751b7965142ae5e194f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016574f123a80000040300483046022100ce17c7277c7497fef5649019dadb7b914c5c0920c541419bc8f07a1a3f4ae0a8022100f4e5983c7da5deedd03168a7806584d215163a0d9f3e791795d4698667962356
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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