punecafe.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:cb:11:6a:6a:7a:b6:80:4b:75:92:14:ae:23:05:3a:e7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=punecafe.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:cb:11:6a:6a:7a:b6:80:4b:75:92:14:ae:23:05:3a:e7
Serial Number (int): 261947063872764192432745577120352761625319
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:92:4a:90:e8:98:23:2c:18:1a:f5:56:3f:f7:fa:4d:cd:d6:d6:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:5e:c7:c0:e7:ea:57:4b:02:e1:23:e2:af:86:b0:de:e1:04:f3:4d
Fingerprint (sha256): cc:2a:ac:d8:2d:8b:7f:37:63:30:77:d6:a6:bb:b0:c1:63:86:cc:a3:14:e5:d8:e9:22:d6:06:de:a2:a3:bf:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate punecafe.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for punecafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airportemployee.com
architects-cafe.com
aucklandcafe.com
bandungcafe.com
bestorganiccafe.com
brisbanecafe.com
campograndecafe.com
createmusiccafe.com
curitibacafe.com
dortmundcafe.com
earthorganiccafe.com
gazacafe.com
greenorganiccafe.com
guiyangcafe.com
helsinkicafe.com
hispaniccafe.com
indonesiacafe.com
ipohcafe.com
konyacafe.com
leipzigcafe.com
liveworkcafe.com
lombokcafe.com
luxembourgcafe.com
marseillecafe.com
miningcafe.com
nebraskacafe.com
newhampshirecafe.com
newworldgeographiccafe.com
nigeriacafe.com
notemployee.com
odessacafe.com
opahgreekcafe.com
pathcafe.com
planetgeographiccafe.com
punecafe.com
rawalpindicafe.com
reykjavikcafe.com
saintpetersburgcafe.com
saratogacafe.com
sendaicafe.com
serveyouremployee.com
sheffieldcafe.com
southchinacafe.com
teaching-cafe.com
terminatinganemployee.com
toulousecafe.com
tulacafe.com
wholefoodcafe.com
worldgeographiccafe.com
www.airportemployee.com
www.architects-cafe.com
www.aucklandcafe.com
www.bandungcafe.com
www.bestorganiccafe.com
www.brisbanecafe.com
www.campograndecafe.com
www.createmusiccafe.com
www.curitibacafe.com
www.dortmundcafe.com
www.earthorganiccafe.com
www.gazacafe.com
www.greenorganiccafe.com
www.guiyangcafe.com
www.helsinkicafe.com
www.hispaniccafe.com
www.indonesiacafe.com
www.ipohcafe.com
www.konyacafe.com
www.leipzigcafe.com
www.liveworkcafe.com
www.lombokcafe.com
www.luxembourgcafe.com
www.marseillecafe.com
www.miningcafe.com
www.nebraskacafe.com
www.newhampshirecafe.com
www.newworldgeographiccafe.com
www.nigeriacafe.com
www.notemployee.com
www.odessacafe.com
www.opahgreekcafe.com
www.pathcafe.com
www.planetgeographiccafe.com
www.punecafe.com
www.rawalpindicafe.com
www.reykjavikcafe.com
www.saintpetersburgcafe.com
www.saratogacafe.com
www.sendaicafe.com
www.serveyouremployee.com
www.sheffieldcafe.com
www.southchinacafe.com
www.teaching-cafe.com
www.terminatinganemployee.com
www.toulousecafe.com
www.tulacafe.com
www.wholefoodcafe.com
www.worldgeographiccafe.com
www.wyomingcafe.com
wyomingcafe.com

Other certificates including the domain name punecafe.com

(limited to 100 certificates)
www.ipohcafe.com
punecafe.com
punecafe.com
punecafe.com
punecafe.com
www.airportemployee.com
www.miningcafe.com
www.konyacafe.com
www.indonesiacafe.com
www.rawalpindicafe.com
teaching-cafe.com
www.guiyangcafe.com
brisbanecafe.com
punecafe.com
www.airportemployee.com

Certificate

The complete raw certificate details for punecafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz5K6ts+7xbmkR408/Xi
tunm0iuGudDGln43bfXgr74yTHhvYJEXVp7Eje0RzaT98KnS5GwWkxabBjOH7Mqh
C57A0JRnoRqhkCrugiTd8j66odIOdPlmx2Df9PqPUVyBkbegQSisUHL7jjFz5sgQ
lKowSBcAl34vHaV4XZrODiPwCteS7yaCdpIKYTxSojsC7FgnXKfyp85d+BWDLICC
KuV6Q9iW6S1nZLddPMTmnX3yewUDISKtdV5sXEZYu2gTkYk0T1Obshs7ceJ7QpjP
uYQ5VUYxT5Y/t6pEVoH1xnbifDY1cLfAPPAKe24rlcxoHHFBrQik01XIzqCUIq3z
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261947063872764192432745577120352761625319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 13:08:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 13:08:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'punecafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26162046776640673908842949096892755683739634843820375956836085614907408998186422170613365700745837334043751103517348803597085792700097084198488286519271564560567725212173595160147279031764456447239460188934644096777758670521915501379310520753636464071283506071462327552709710767447359540743416226844585559661707065236068758703318207674184254703848858415679176876306797206325842680053537898052531277869899361947176025622016177893772319539230939011552859369501760518827806615089422030549602782692942522767201146348256152872400318961050126261961044174814849649570311945093130085006846081414681674300555354949509708641209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b924a90e898232c181af5563ff7fa4dcdd6d612
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southchinacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.architects-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bandungcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brisbanecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campograndecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createmusiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curitibacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dortmundcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earthorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenorganiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiyangcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helsinkicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hispaniccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indonesiacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipohcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konyacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leipzigcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveworkcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lombokcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxembourgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marseillecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newworldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nigeriacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odessacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opahgreekcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawalpindicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reykjavikcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintpetersburgcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saratogacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sendaicafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serveyouremployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheffieldcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southchinacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teaching-cafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terminatinganemployee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toulousecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wholefoodcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldgeographiccafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingcafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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