punecafe.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:40:d9:32:e3:33:f1:b0:ae:16:96:b2:df:5f:9b:7e:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=punecafe.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:40:d9:32:e3:33:f1:b0:ae:16:96:b2:df:5f:9b:7e:b0
Serial Number (int): 278777456860518487244257841950283469127344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:93:59:24:11:c3:b0:59:ef:97:0d:7e:67:28:d7:d5:73:bf:32:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:bf:ee:51:d5:a8:bd:fa:a7:a8:3e:93:a8:42:da:28:15:dc:d3:ea
Fingerprint (sha256): 62:fa:e9:bd:cf:4d:47:c4:8a:2f:a3:00:26:15:9e:cd:c6:89:9c:f2:70:43:6b:38:5e:38:0e:ed:b1:3b:a2:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate punecafe.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for punecafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportemployee.com
architects-cafe.com
aucklandcafe.com
bandungcafe.com
bestorganiccafe.com
brisbanecafe.com
campograndecafe.com
createmusiccafe.com
curitibacafe.com
dortmundcafe.com
earthorganiccafe.com
gazacafe.com
greenorganiccafe.com
guiyangcafe.com
helsinkicafe.com
hispaniccafe.com
indonesiacafe.com
ipohcafe.com
konyacafe.com
leipzigcafe.com
liveworkcafe.com
lombokcafe.com
luxembourgcafe.com
marseillecafe.com
miningcafe.com
nebraskacafe.com
newhampshirecafe.com
newworldgeographiccafe.com
nigeriacafe.com
notemployee.com
odessacafe.com
opahgreekcafe.com
pathcafe.com
planetgeographiccafe.com
punecafe.com
rawalpindicafe.com
reykjavikcafe.com
saintpetersburgcafe.com
saratogacafe.com
sendaicafe.com
serveyouremployee.com
sheffieldcafe.com
southchinacafe.com
teaching-cafe.com
terminatinganemployee.com
toulousecafe.com
tulacafe.com
wholefoodcafe.com
worldgeographiccafe.com
www.airportemployee.com
www.architects-cafe.com
www.aucklandcafe.com
www.bandungcafe.com
www.bestorganiccafe.com
www.brisbanecafe.com
www.campograndecafe.com
www.createmusiccafe.com
www.curitibacafe.com
www.dortmundcafe.com
www.earthorganiccafe.com
www.gazacafe.com
www.greenorganiccafe.com
www.guiyangcafe.com
www.helsinkicafe.com
www.hispaniccafe.com
www.indonesiacafe.com
www.ipohcafe.com
www.konyacafe.com
www.leipzigcafe.com
www.liveworkcafe.com
www.lombokcafe.com
www.luxembourgcafe.com
www.marseillecafe.com
www.miningcafe.com
www.nebraskacafe.com
www.newhampshirecafe.com
www.newworldgeographiccafe.com
www.nigeriacafe.com
www.notemployee.com
www.odessacafe.com
www.opahgreekcafe.com
www.pathcafe.com
www.planetgeographiccafe.com
www.punecafe.com
www.rawalpindicafe.com
www.reykjavikcafe.com
www.saintpetersburgcafe.com
www.saratogacafe.com
www.sendaicafe.com
www.serveyouremployee.com
www.sheffieldcafe.com
www.southchinacafe.com
www.teaching-cafe.com
www.terminatinganemployee.com
www.toulousecafe.com
www.tulacafe.com
www.wholefoodcafe.com
www.worldgeographiccafe.com
www.wyomingcafe.com
wyomingcafe.com

Other certificates including the domain name punecafe.com

(limited to 100 certificates)
www.ipohcafe.com
punecafe.com
punecafe.com
punecafe.com
punecafe.com
www.airportemployee.com
www.miningcafe.com
www.konyacafe.com
www.indonesiacafe.com
www.rawalpindicafe.com
teaching-cafe.com
www.guiyangcafe.com
brisbanecafe.com
punecafe.com
www.airportemployee.com

Certificate

The complete raw certificate details for punecafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINJTCCDA2gAwIBAgISAzNA2TLjM/GwrhaWst9fm36wMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MjMxMjM2MDBaFw0x
NzEyMjIxMjM2MDBaMBcxFTATBgNVBAMTDHB1bmVjYWZlLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAK0S6aD0OIyBVHgnzKmiUI+n3IYKPszLNzr/
Pgs/IgC+TfaQV8Jj1FiDhoUYIHDfUgbezog6WNTob8qI97o4QwnYSRp7TB8XDbED
6bGjXVkdl2ODYBrm0kTnqXIwF5ZIw7Dm1k2rRMIdc2DjOT5uHSejidkS6ZQhOr2O
euQ0mXfQLjR+rufz5bS12Mr/hVHTIre83Mbww5HbkABAIpJyQS3+rxiwEgYrqL3l
GTX7TvtQCbd4xWjw/IMQdJhFWx0Hs3d5MEB00E1d0ejIoQl/xyY1fo5zkcFH+gf7
1re8Ud40vU5CBdcHlJPfcPTt36n0sa8TEJbKKQQCigZM8PjlmqUCAwEAAaOCCjYw
ggoyMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUt5NZJBHDsFnvlw1+ZyjX1XO/Mmgw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCCD8GA1UdEQSCCDYwgggyghNhaXJwb3J0ZW1wbG95ZWUuY29tghNhcmNoaXRl
Y3RzLWNhZmUuY29tghBhdWNrbGFuZGNhZmUuY29tgg9iYW5kdW5nY2FmZS5jb22C
E2Jlc3RvcmdhbmljY2FmZS5jb22CEGJyaXNiYW5lY2FmZS5jb22CE2NhbXBvZ3Jh
bmRlY2FmZS5jb22CE2NyZWF0ZW11c2ljY2FmZS5jb22CEGN1cml0aWJhY2FmZS5j
b22CEGRvcnRtdW5kY2FmZS5jb22CFGVhcnRob3JnYW5pY2NhZmUuY29tggxnYXph
Y2FmZS5jb22CFGdyZWVub3JnYW5pY2NhZmUuY29tgg9ndWl5YW5nY2FmZS5jb22C
EGhlbHNpbmtpY2FmZS5jb22CEGhpc3BhbmljY2FmZS5jb22CEWluZG9uZXNpYWNh
ZmUuY29tggxpcG9oY2FmZS5jb22CDWtvbnlhY2FmZS5jb22CD2xlaXB6aWdjYWZl
LmNvbYIQbGl2ZXdvcmtjYWZlLmNvbYIObG9tYm9rY2FmZS5jb22CEmx1eGVtYm91
cmdjYWZlLmNvbYIRbWFyc2VpbGxlY2FmZS5jb22CDm1pbmluZ2NhZmUuY29tghBu
ZWJyYXNrYWNhZmUuY29tghRuZXdoYW1wc2hpcmVjYWZlLmNvbYIabmV3d29ybGRn
ZW9ncmFwaGljY2FmZS5jb22CD25pZ2VyaWFjYWZlLmNvbYIPbm90ZW1wbG95ZWUu
Y29tgg5vZGVzc2FjYWZlLmNvbYIRb3BhaGdyZWVrY2FmZS5jb22CDHBhdGhjYWZl
LmNvbYIYcGxhbmV0Z2VvZ3JhcGhpY2NhZmUuY29tggxwdW5lY2FmZS5jb22CEnJh
d2FscGluZGljYWZlLmNvbYIRcmV5a2phdmlrY2FmZS5jb22CF3NhaW50cGV0ZXJz
YnVyZ2NhZmUuY29tghBzYXJhdG9nYWNhZmUuY29tgg5zZW5kYWljYWZlLmNvbYIV
c2VydmV5b3VyZW1wbG95ZWUuY29tghFzaGVmZmllbGRjYWZlLmNvbYISc291dGhj
aGluYWNhZmUuY29tghF0ZWFjaGluZy1jYWZlLmNvbYIZdGVybWluYXRpbmdhbmVt
cGxveWVlLmNvbYIQdG91bG91c2VjYWZlLmNvbYIMdHVsYWNhZmUuY29tghF3aG9s
ZWZvb2RjYWZlLmNvbYIXd29ybGRnZW9ncmFwaGljY2FmZS5jb22CF3d3dy5haXJw
b3J0ZW1wbG95ZWUuY29tghd3d3cuYXJjaGl0ZWN0cy1jYWZlLmNvbYIUd3d3LmF1
Y2tsYW5kY2FmZS5jb22CE3d3dy5iYW5kdW5nY2FmZS5jb22CF3d3dy5iZXN0b3Jn
YW5pY2NhZmUuY29tghR3d3cuYnJpc2JhbmVjYWZlLmNvbYIXd3d3LmNhbXBvZ3Jh
bmRlY2FmZS5jb22CF3d3dy5jcmVhdGVtdXNpY2NhZmUuY29tghR3d3cuY3VyaXRp
YmFjYWZlLmNvbYIUd3d3LmRvcnRtdW5kY2FmZS5jb22CGHd3dy5lYXJ0aG9yZ2Fu
aWNjYWZlLmNvbYIQd3d3LmdhemFjYWZlLmNvbYIYd3d3LmdyZWVub3JnYW5pY2Nh
ZmUuY29tghN3d3cuZ3VpeWFuZ2NhZmUuY29tghR3d3cuaGVsc2lua2ljYWZlLmNv
bYIUd3d3Lmhpc3BhbmljY2FmZS5jb22CFXd3dy5pbmRvbmVzaWFjYWZlLmNvbYIQ
d3d3Lmlwb2hjYWZlLmNvbYIRd3d3LmtvbnlhY2FmZS5jb22CE3d3dy5sZWlwemln
Y2FmZS5jb22CFHd3dy5saXZld29ya2NhZmUuY29tghJ3d3cubG9tYm9rY2FmZS5j
b22CFnd3dy5sdXhlbWJvdXJnY2FmZS5jb22CFXd3dy5tYXJzZWlsbGVjYWZlLmNv
bYISd3d3Lm1pbmluZ2NhZmUuY29tghR3d3cubmVicmFza2FjYWZlLmNvbYIYd3d3
Lm5ld2hhbXBzaGlyZWNhZmUuY29tgh53d3cubmV3d29ybGRnZW9ncmFwaGljY2Fm
ZS5jb22CE3d3dy5uaWdlcmlhY2FmZS5jb22CE3d3dy5ub3RlbXBsb3llZS5jb22C
End3dy5vZGVzc2FjYWZlLmNvbYIVd3d3Lm9wYWhncmVla2NhZmUuY29tghB3d3cu
cGF0aGNhZmUuY29tghx3d3cucGxhbmV0Z2VvZ3JhcGhpY2NhZmUuY29tghB3d3cu
cHVuZWNhZmUuY29tghZ3d3cucmF3YWxwaW5kaWNhZmUuY29tghV3d3cucmV5a2ph
dmlrY2FmZS5jb22CG3d3dy5zYWludHBldGVyc2J1cmdjYWZlLmNvbYIUd3d3LnNh
cmF0b2dhY2FmZS5jb22CEnd3dy5zZW5kYWljYWZlLmNvbYIZd3d3LnNlcnZleW91
cmVtcGxveWVlLmNvbYIVd3d3LnNoZWZmaWVsZGNhZmUuY29tghZ3d3cuc291dGhj
aGluYWNhZmUuY29tghV3d3cudGVhY2hpbmctY2FmZS5jb22CHXd3dy50ZXJtaW5h
dGluZ2FuZW1wbG95ZWUuY29tghR3d3cudG91bG91c2VjYWZlLmNvbYIQd3d3LnR1
bGFjYWZlLmNvbYIVd3d3Lndob2xlZm9vZGNhZmUuY29tght3d3cud29ybGRnZW9n
cmFwaGljY2FmZS5jb22CE3d3dy53eW9taW5nY2FmZS5jb22CD3d5b21pbmdjYWZl
LmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEF
BQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVw
b24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0
aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2Vu
Y3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQAx8C4Zsz+o
LPpUxgAreg6eD71lj3UDs+W8UoSxAJJd1iaBCJKTRfOKPXdknyC4Z4Gq+WyblrxB
D/veKMWsJ6XuCwtPTKE3jJ/x1uuXsj21zamjRjoj+n6iLGs4uLcRRCtQg3rI74+0
dRNH9Zwe2VBKDj+sAWI2ARB29ztxATcIq7XTQehBIM9MTfi9KzAH4xYVH+5521TH
s/b7tF0K5al7PNt++UmxGnhnCloCOGgkdSZeo+ugKdtaTCSfrbthlRNEBuUZaLRX
0LiTLuD5L3FmDkBxAnkmTZIiy130trq8opIEUHPkqUm85g93xw6f0m3RAmLcNYou
M/nmJsIzu0HZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRLpoPQ4jIFUeCfMqaJQ
j6fchgo+zMs3Ov8+Cz8iAL5N9pBXwmPUWIOGhRggcN9SBt7OiDpY1Ohvyoj3ujhD
CdhJGntMHxcNsQPpsaNdWR2XY4NgGubSROepcjAXlkjDsObWTatEwh1zYOM5Pm4d
J6OJ2RLplCE6vY565DSZd9AuNH6u5/PltLXYyv+FUdMit7zcxvDDkduQAEAiknJB
Lf6vGLASBiuoveUZNftO+1AJt3jFaPD8gxB0mEVbHQezd3kwQHTQTV3R6MihCX/H
JjV+jnORwUf6B/vWt7xR3jS9TkIF1weUk99w9O3fqfSxrxMQlsopBAKKBkzw+OWa
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278777456860518487244257841950283469127344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 12:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-22 12:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'punecafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21848552915800966418931698571711163328295345778142192155830842842070153207654528871517028834558099380952880992140546815617895210857365048472590877160806726013184115625219581176621031196236611438682822990715659210449051841017309800786171816622749493287695799543736847435251164085522287448737085873341314299818858815792991860083359625052856241099768158744370238836207860350196612496384306254916541436464316329309803888064032526693462505321739011866645936651556965116882249698947585953248401171152629482403325820853728799849312200346276905706675911995111279874059276442008315315951572486731072762041171701725553454586533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b793592411c3b059ef970d7e6728d7d573bf3268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southchinacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southchinacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingcafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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