brisbanecafe.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:f4:ad:4d:ef:90:32:d9:f5:ee:e4:76:03:d1:83:48:39 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brisbanecafe.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:f4:ad:4d:ef:90:32:d9:f5:ee:e4:76:03:d1:83:48:39
Serial Number (int): 320190656384735899292823642528792275273785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:86:10:e2:09:19:47:d5:66:43:a4:dc:a9:2a:d6:97:35:fd:15:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:c9:17:90:f7:e4:03:ae:60:34:86:42:92:b2:74:6c:be:38:04:dc
Fingerprint (sha256): be:ef:8e:5f:9a:cf:52:a9:a5:04:15:7b:c6:92:0f:68:45:d3:68:b6:c3:72:70:36:d2:7b:dd:c5:3a:97:94:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brisbanecafe.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brisbanecafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportemployee.com
architects-cafe.com
aucklandcafe.com
bandungcafe.com
bestorganiccafe.com
brisbanecafe.com
campograndecafe.com
createmusiccafe.com
curitibacafe.com
dortmundcafe.com
earthorganiccafe.com
gazacafe.com
greenorganiccafe.com
guiyangcafe.com
hispaniccafe.com
indonesiacafe.com
ipohcafe.com
konyacafe.com
leipzigcafe.com
liveworkcafe.com
lombokcafe.com
luxembourgcafe.com
marseillecafe.com
miningcafe.com
nebraskacafe.com
newhampshirecafe.com
newworldgeographiccafe.com
nigeriacafe.com
notemployee.com
opahgreekcafe.com
pathcafe.com
planetgeographiccafe.com
punecafe.com
rawalpindicafe.com
saintpetersburgcafe.com
saratogacafe.com
sendaicafe.com
serveyouremployee.com
sheffieldcafe.com
teaching-cafe.com
terminatinganemployee.com
toulousecafe.com
tulacafe.com
wholefoodcafe.com
worldgeographiccafe.com
www.airportemployee.com
www.architects-cafe.com
www.aucklandcafe.com
www.bandungcafe.com
www.bestorganiccafe.com
www.brisbanecafe.com
www.campograndecafe.com
www.createmusiccafe.com
www.curitibacafe.com
www.dortmundcafe.com
www.earthorganiccafe.com
www.gazacafe.com
www.greenorganiccafe.com
www.guiyangcafe.com
www.hispaniccafe.com
www.indonesiacafe.com
www.ipohcafe.com
www.konyacafe.com
www.leipzigcafe.com
www.liveworkcafe.com
www.lombokcafe.com
www.luxembourgcafe.com
www.marseillecafe.com
www.miningcafe.com
www.nebraskacafe.com
www.newhampshirecafe.com
www.newworldgeographiccafe.com
www.nigeriacafe.com
www.notemployee.com
www.opahgreekcafe.com
www.pathcafe.com
www.planetgeographiccafe.com
www.punecafe.com
www.rawalpindicafe.com
www.saintpetersburgcafe.com
www.saratogacafe.com
www.sendaicafe.com
www.serveyouremployee.com
www.sheffieldcafe.com
www.teaching-cafe.com
www.terminatinganemployee.com
www.toulousecafe.com
www.tulacafe.com
www.wholefoodcafe.com
www.worldgeographiccafe.com
www.wyomingcafe.com
wyomingcafe.com

Other certificates including the domain name brisbanecafe.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for brisbanecafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg5qJpt9onmRxqKwNeKU
VvGzkcCg9ZTsssSq/8mxq2qKKe1Hg/UeRgSjlanQrKczCAXDtA3B3zLr9ksTj5h/
MaN/3y2wUfcf1vlnmdzBc5R2ceFmi1G5swYBCd8mllGx1jBKH3rFUM9IpaSTgAmV
ePLMesI4LjP8Cf2vB+6wtN4jvhgK2aLgYXOCmqIFh2/IvHMDKaikfq/oeaVs2jUe
b4mMYqm7SjTIwvQcpwvGQKPLlSkJpCUKFm3HjGH1AutC1XxZHW5H2UE35x0SO+Cn
KOrMjlHr5EOBq7vWhZCHy48HVtXn+q4dEaS8I4fiaa6Vl8MPsaGd3tiTFVYa+Gl8
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320190656384735899292823642528792275273785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 10:43:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 10:43:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brisbanecafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22982479633451212988578361169901878519446812646810004296758260096314856845758727800379068708718456769603502380479929866171918328721982400315153746516947001405454320242069738649591937537694651846457431672050057291830255967730231422592163522875187955625232559231897699425166447389858732978659922585610517551249767390680596937606864303075311798925897767660982443363083373282651812106296380424932485872348924623119890648089734939477572340674396490790088431176660057039104819633501706292521534495399392217874930148881824135505949203002200698285506645327920259543830375337742495063760266725124593751808545052089927021984971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							268610e2091947d56643a4dca92ad69735fd15ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingcafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164748da03a000004030048304602210090491819b14ca822c0e859faef8308fe5c412da7450d2cb2353ebb97c99db630022100cfa3e270e0919e73d8805432d929d17aa3fe190fcc9627c2b2e0c4a51ee05b270076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164748da31900000403004730450220322ea7ece53d222bedc8648402e181ab0d59e1492f4c2d7404443dd7c48f6983022100a514d95b6defeb613f813d0884d9aad73f901ca28366d18618dbd850feac5c24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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