www.guiyangcafe.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:ac:c9:09:1f:bf:5a:b4:fc:e7:65:12:ed:b7:11:32:8f was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.guiyangcafe.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:ac:c9:09:1f:bf:5a:b4:fc:e7:65:12:ed:b7:11:32:8f
Serial Number (int): 294573918438612322692009915555405718696591
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:a1:52:38:16:ba:6e:25:f9:e1:70:f5:b2:c9:8b:99:14:25:56:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:21:24:dc:7c:65:b5:3b:9f:12:41:69:93:c8:ac:be:16:00:64:af
Fingerprint (sha256): ba:fc:b2:b9:a1:e2:16:37:ec:6f:9e:15:48:fa:df:a6:e0:82:a1:05:66:1b:d5:f7:42:23:be:f1:36:c9:3c:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.guiyangcafe.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.guiyangcafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportemployee.com
architects-cafe.com
aucklandcafe.com
bandungcafe.com
bestorganiccafe.com
brisbanecafe.com
campograndecafe.com
createmusiccafe.com
curitibacafe.com
dortmundcafe.com
earthorganiccafe.com
gazacafe.com
greenorganiccafe.com
guiyangcafe.com
helsinkicafe.com
hispaniccafe.com
indonesiacafe.com
ipohcafe.com
konyacafe.com
leipzigcafe.com
liveworkcafe.com
lombokcafe.com
luxembourgcafe.com
marseillecafe.com
miningcafe.com
nebraskacafe.com
newhampshirecafe.com
newworldgeographiccafe.com
nigeriacafe.com
notemployee.com
odessacafe.com
opahgreekcafe.com
pathcafe.com
planetgeographiccafe.com
punecafe.com
rawalpindicafe.com
reykjavikcafe.com
saintpetersburgcafe.com
saratogacafe.com
sendaicafe.com
serveyouremployee.com
sheffieldcafe.com
teaching-cafe.com
terminatinganemployee.com
toulousecafe.com
tulacafe.com
wholefoodcafe.com
worldgeographiccafe.com
www.airportemployee.com
www.architects-cafe.com
www.aucklandcafe.com
www.bandungcafe.com
www.bestorganiccafe.com
www.brisbanecafe.com
www.campograndecafe.com
www.createmusiccafe.com
www.curitibacafe.com
www.dortmundcafe.com
www.earthorganiccafe.com
www.gazacafe.com
www.greenorganiccafe.com
www.guiyangcafe.com
www.helsinkicafe.com
www.hispaniccafe.com
www.indonesiacafe.com
www.ipohcafe.com
www.konyacafe.com
www.leipzigcafe.com
www.liveworkcafe.com
www.lombokcafe.com
www.luxembourgcafe.com
www.marseillecafe.com
www.miningcafe.com
www.nebraskacafe.com
www.newhampshirecafe.com
www.newworldgeographiccafe.com
www.nigeriacafe.com
www.notemployee.com
www.odessacafe.com
www.opahgreekcafe.com
www.pathcafe.com
www.planetgeographiccafe.com
www.punecafe.com
www.rawalpindicafe.com
www.reykjavikcafe.com
www.saintpetersburgcafe.com
www.saratogacafe.com
www.sendaicafe.com
www.serveyouremployee.com
www.sheffieldcafe.com
www.teaching-cafe.com
www.terminatinganemployee.com
www.toulousecafe.com
www.tulacafe.com
www.wholefoodcafe.com
www.worldgeographiccafe.com
www.wyomingcafe.com
wyomingcafe.com

Other certificates including the domain name guiyangcafe.com

(limited to 100 certificates)
www.africancountrylife.com
allahabadcollege.com
changecall.com
blockchainopera.com
recruitmentkazakhstan.com
blockchainsystems.org
www.ipohcafe.com
advertisingmediajobs.com
www.recruitmentkazakhstan.com
www.physiks.org
jerusalemtrade.com
www.worldlitgator.com
shakespearesbooks.com
createyouroom.com
futureenergyexhibition.com
punecafe.com
madridresidence.com
partnershipexchange.com
mediabolivia.com
jerusalemtrade.com
recruitmentkazakhstan.com
malawiwildlife.com
www.majorpipeline.com
www.achildofourtime.com
shakespearemusical.com
www.guiyangcafe.com
dreamopera.com
www.spiritualresult.com
www.northkoreainc.com
www.maritimerecruiting.net
punecafe.com
energiedetogo.com
www.objectivereporting.net
www.majorpipeline.com
www.portbaltimore.com
marinerecruiting.net
www.weekendstuttgart.com
www.stageexhibition.net
www.parksoho.com
punecafe.com
www.stronglifeinsurance.com
www.futureenergyexhibition.com
www.nashvillescholarship.com
www.indiawealthfund.com
jerusalemtrade.com
www.airportemployee.com
www.financeexport.com
www.portbaltimore.com
www.miningcafe.com
www.bogoroffice.com
phonestuttgart.com
www.exactlywhatyouwanttodoinlife.com
www.vaticancityoffice.com
colombiawildlife.com
www.createyouroom.com
www.portbaltimore.com
www.konyacafe.com
www.londonoffshoreconsult.com
www.achildofourtime.com
maorihunting.net
www.indonesiacafe.com
optimizedvesseldesign.com
www.novostiradio.com
www.indiawealthfund.com
www.privatebankinc.com
usapressservice.com
www.newmediafinance.com
www.nashvillescholarship.com
www.rawalpindicafe.com
financeexport.com
www.academyofseattle.com
webdjango.com
malawiwildlife.com
isthatokyou.com
advertisingmediajobs.com
www.divingcontractor.com
oceaninvestmentfund.com
israeliemigration.com
teaching-cafe.com
www.newsubsea.com
www.guiyangcafe.com
brisbanecafe.com
amphitheatreparkway.org
metalsmelting.net
www.majorpipeline.com
azeripeople.com
www.newsubsea.com
majorpipeline.com
futureenergyexhibition.com
cookislandsoffice.com
punecafe.com
www.renewableenergyllp.com
www.nightlifestuttgart.com
www.londonoffshoreconsult.com
www.nashvillescholarship.com
changecall.com
www.worldgeologic.org
www.cookislandsoffice.com
www.mendozavintage.com
www.manila3d.com

Certificate

The complete raw certificate details for www.guiyangcafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINADCCC+igAwIBAgISA2GsyQkfv1q0/OdlEu23ETKPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMjcxMjI2MDJaFw0x
ODA1MjgxMjI2MDJaMB4xHDAaBgNVBAMTE3d3dy5ndWl5YW5nY2FmZS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCi4U5md/qdnYylVsZoKCbFNST
H+Xy9PwXRLi4AY9p6YSiwWJINeT2JC5I2agjVl8zg8/xgyyduLYjcmUPbxRZ2tod
MOvyIvzNJYDKfi7qIpgJyrUwvlaU4flT73kmsUycXfzDXkR4ZnPF+PjEwk+UPgOr
IMz3bbg9SeljupVFY32nGjow/wzOJcAxb2GqEgROBrPv9SPpuxYQNV2wZnkwJpS1
ENIWnhMNsKDQPanBry/M5gOSGOnzz4Rk4v/nMf+LRJ/gPaoX4z+tcDB3FyMTwvHl
H10pdiDpxFC1ZU/U9PMOyVyGubuH11W40Wwslmuu+LjVMogtLvoLpH2aM7bFAgMB
AAGjggoKMIIKBjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLKhUjgWum4l+eFw9bLJ
i5kUJVZuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wgggTBgNVHREEgggKMIIIBoITYWlycG9ydGVtcGxveWVlLmNvbYIT
YXJjaGl0ZWN0cy1jYWZlLmNvbYIQYXVja2xhbmRjYWZlLmNvbYIPYmFuZHVuZ2Nh
ZmUuY29tghNiZXN0b3JnYW5pY2NhZmUuY29tghBicmlzYmFuZWNhZmUuY29tghNj
YW1wb2dyYW5kZWNhZmUuY29tghNjcmVhdGVtdXNpY2NhZmUuY29tghBjdXJpdGli
YWNhZmUuY29tghBkb3J0bXVuZGNhZmUuY29tghRlYXJ0aG9yZ2FuaWNjYWZlLmNv
bYIMZ2F6YWNhZmUuY29tghRncmVlbm9yZ2FuaWNjYWZlLmNvbYIPZ3VpeWFuZ2Nh
ZmUuY29tghBoZWxzaW5raWNhZmUuY29tghBoaXNwYW5pY2NhZmUuY29tghFpbmRv
bmVzaWFjYWZlLmNvbYIMaXBvaGNhZmUuY29tgg1rb255YWNhZmUuY29tgg9sZWlw
emlnY2FmZS5jb22CEGxpdmV3b3JrY2FmZS5jb22CDmxvbWJva2NhZmUuY29tghJs
dXhlbWJvdXJnY2FmZS5jb22CEW1hcnNlaWxsZWNhZmUuY29tgg5taW5pbmdjYWZl
LmNvbYIQbmVicmFza2FjYWZlLmNvbYIUbmV3aGFtcHNoaXJlY2FmZS5jb22CGm5l
d3dvcmxkZ2VvZ3JhcGhpY2NhZmUuY29tgg9uaWdlcmlhY2FmZS5jb22CD25vdGVt
cGxveWVlLmNvbYIOb2Rlc3NhY2FmZS5jb22CEW9wYWhncmVla2NhZmUuY29tggxw
YXRoY2FmZS5jb22CGHBsYW5ldGdlb2dyYXBoaWNjYWZlLmNvbYIMcHVuZWNhZmUu
Y29tghJyYXdhbHBpbmRpY2FmZS5jb22CEXJleWtqYXZpa2NhZmUuY29tghdzYWlu
dHBldGVyc2J1cmdjYWZlLmNvbYIQc2FyYXRvZ2FjYWZlLmNvbYIOc2VuZGFpY2Fm
ZS5jb22CFXNlcnZleW91cmVtcGxveWVlLmNvbYIRc2hlZmZpZWxkY2FmZS5jb22C
EXRlYWNoaW5nLWNhZmUuY29tghl0ZXJtaW5hdGluZ2FuZW1wbG95ZWUuY29tghB0
b3Vsb3VzZWNhZmUuY29tggx0dWxhY2FmZS5jb22CEXdob2xlZm9vZGNhZmUuY29t
ghd3b3JsZGdlb2dyYXBoaWNjYWZlLmNvbYIXd3d3LmFpcnBvcnRlbXBsb3llZS5j
b22CF3d3dy5hcmNoaXRlY3RzLWNhZmUuY29tghR3d3cuYXVja2xhbmRjYWZlLmNv
bYITd3d3LmJhbmR1bmdjYWZlLmNvbYIXd3d3LmJlc3RvcmdhbmljY2FmZS5jb22C
FHd3dy5icmlzYmFuZWNhZmUuY29tghd3d3cuY2FtcG9ncmFuZGVjYWZlLmNvbYIX
d3d3LmNyZWF0ZW11c2ljY2FmZS5jb22CFHd3dy5jdXJpdGliYWNhZmUuY29tghR3
d3cuZG9ydG11bmRjYWZlLmNvbYIYd3d3LmVhcnRob3JnYW5pY2NhZmUuY29tghB3
d3cuZ2F6YWNhZmUuY29tghh3d3cuZ3JlZW5vcmdhbmljY2FmZS5jb22CE3d3dy5n
dWl5YW5nY2FmZS5jb22CFHd3dy5oZWxzaW5raWNhZmUuY29tghR3d3cuaGlzcGFu
aWNjYWZlLmNvbYIVd3d3LmluZG9uZXNpYWNhZmUuY29tghB3d3cuaXBvaGNhZmUu
Y29tghF3d3cua29ueWFjYWZlLmNvbYITd3d3LmxlaXB6aWdjYWZlLmNvbYIUd3d3
LmxpdmV3b3JrY2FmZS5jb22CEnd3dy5sb21ib2tjYWZlLmNvbYIWd3d3Lmx1eGVt
Ym91cmdjYWZlLmNvbYIVd3d3Lm1hcnNlaWxsZWNhZmUuY29tghJ3d3cubWluaW5n
Y2FmZS5jb22CFHd3dy5uZWJyYXNrYWNhZmUuY29tghh3d3cubmV3aGFtcHNoaXJl
Y2FmZS5jb22CHnd3dy5uZXd3b3JsZGdlb2dyYXBoaWNjYWZlLmNvbYITd3d3Lm5p
Z2VyaWFjYWZlLmNvbYITd3d3Lm5vdGVtcGxveWVlLmNvbYISd3d3Lm9kZXNzYWNh
ZmUuY29tghV3d3cub3BhaGdyZWVrY2FmZS5jb22CEHd3dy5wYXRoY2FmZS5jb22C
HHd3dy5wbGFuZXRnZW9ncmFwaGljY2FmZS5jb22CEHd3dy5wdW5lY2FmZS5jb22C
Fnd3dy5yYXdhbHBpbmRpY2FmZS5jb22CFXd3dy5yZXlramF2aWtjYWZlLmNvbYIb
d3d3LnNhaW50cGV0ZXJzYnVyZ2NhZmUuY29tghR3d3cuc2FyYXRvZ2FjYWZlLmNv
bYISd3d3LnNlbmRhaWNhZmUuY29tghl3d3cuc2VydmV5b3VyZW1wbG95ZWUuY29t
ghV3d3cuc2hlZmZpZWxkY2FmZS5jb22CFXd3dy50ZWFjaGluZy1jYWZlLmNvbYId
d3d3LnRlcm1pbmF0aW5nYW5lbXBsb3llZS5jb22CFHd3dy50b3Vsb3VzZWNhZmUu
Y29tghB3d3cudHVsYWNhZmUuY29tghV3d3cud2hvbGVmb29kY2FmZS5jb22CG3d3
dy53b3JsZGdlb2dyYXBoaWNjYWZlLmNvbYITd3d3Lnd5b21pbmdjYWZlLmNvbYIP
d3lvbWluZ2NhZmUuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE
AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi
ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj
b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0
cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD
ggEBAAyMNAIysZnI1wy35Zc0wPLPDFuxRIRGc7CxgSjFbDkb9gE54al3z8udkli9
ETTLOc+fm5QUdms8of04I99RxJp6GGbKX5m25lDlya5PzNOJdUw5CEOsvKB8AoTZ
XCxyCUAL6+x8pOmJh8p0PigCaZlBKeXdy4Xx+XoVsYYKMMQI6PXdVIWq7qWpSoN7
+qoJ4+SQ54gKQqmjyE2ULKOOX1W/112S+dvJmBhTolKpnpX/f3rRVt6v7tgftExQ
bv9vveix+yRB7/Ldip0FEH/XRYSdzJ1bgYbc75YajJhB2rgcR+kx1pqmFQ4P7XuO
wKRZi3D18ZhXONT6oI/3LLzk0sA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwouFOZnf6nZ2MpVbGaCg
mxTUkx/l8vT8F0S4uAGPaemEosFiSDXk9iQuSNmoI1ZfM4PP8YMsnbi2I3JlD28U
WdraHTDr8iL8zSWAyn4u6iKYCcq1ML5WlOH5U+95JrFMnF38w15EeGZzxfj4xMJP
lD4DqyDM9224PUnpY7qVRWN9pxo6MP8MziXAMW9hqhIETgaz7/Uj6bsWEDVdsGZ5
MCaUtRDSFp4TDbCg0D2pwa8vzOYDkhjp88+EZOL/5zH/i0Sf4D2qF+M/rXAwdxcj
E8Lx5R9dKXYg6cRQtWVP1PTzDslchrm7h9dVuNFsLJZrrvi41TKILS76C6R9mjO2
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294573918438612322692009915555405718696591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 12:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 12:26:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.guiyangcafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24559031241885532893976560680105350223087195583766645351109336296048518093339524815169853351266400798561573858157270197245397567718833341043596228448574305676756217470659310684685754245702707616462418931606082401417951125590382622749703331225622540348955859797153906509172687939640527788166798530756259865918642068024442095510325008718817523424396112061856618730958222561919199788082670293924680677639755970096206105207110090141066455400592445046816346004188647594764958312205724986224600349460289330928529827260258828232779796312847540598638371195324693926173074307727458635868066148119459714187012693086798391523013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2a1523816ba6e25f9e170f5b2c98b991425566e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingcafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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