aeg-vs09-prod.trafficmanager.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:35:43:85:6a:98:96:cb:9e:c4:3a:bc:e5:b1:41:11:02:cd was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-vs09-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:43:85:6a:98:96:cb:9e:c4:3a:bc:e5:b1:41:11:02:cd
Serial Number (int): 366573860187075267248027128257873733288653
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:be:52:58:e0:64:9d:6a:19:7c:f0:18:64:e3:11:48:ad:e8:f9:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:fc:b7:65:87:96:68:a3:25:0f:ee:75:31:b5:df:93:9a:44:1f:88
Fingerprint (sha256): 06:c8:70:39:a7:74:a4:5a:e5:09:b6:d9:2b:2b:15:94:b7:95:45:90:6e:e2:9f:af:dc:76:eb:d7:5f:54:9b:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aeg-vs09-prod.trafficmanager.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-vs09-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-vs09-prod.trafficmanager.net
aeg-vs09.us-central1.gce.aegp.cloud
aeg-vs09.us-west1.gce.aegp.cloud

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
dev.eastus2.paperboy.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
ML1PrdApp07.prod.idns.azure.net
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
southeastasia.prod.api.medeina.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
CBN09PrdApp01.prod.idns.azure.net
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
ptm-pqs-0.cbr.p.prometheusmetrics.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
tm-cxpes-prod-hipri.trafficmanager.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
BY5PrdApp03.prod.idns.azure.net
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
ic3he-ge-prod.teams.microsoft.com
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
tm-cxpes-prod-oslocom.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com

Certificate

The complete raw certificate details for aeg-vs09-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366573860187075267248027128257873733288653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 23:05:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 23:05:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-vs09-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735414172074155385679653598787071128391642476766381426535665381646416965638738830175565899405085061226672952172927729985080369918380629399582085920864802070396511821992160639492283330307173983293536204749612982956088631071935416399177071901855538086744647667378715730645057865219667161592335311992640348294368643018404965870387880593427222248955411231890615477362460547991807505685670034581670289330970622256280372589047821801043969079700046435954854834581164383978542323223444152393229478309081266188183768817777398775873230759869732414820125452599617620210806806239966285958008505082450697791462342240896677893500945614111772822502220909511780764110130426055750511673772392223386028131696718582113055000479473009325033932218587782039062901153059460610664910737969482693555447824179389792304650462313086010810419469235042982562303933144623567444917326080638357757741271941922489840820960418461838022391402945205867813934069665212558817873308349869858439979221497023918834889137804169498405602357965037288311661917369200900328008056783636564388825186859998164700013677191836684385673344184959682852761218634419345575902739340327316356498707734161387676410283853563761976325655658300269361687743948035497005940050649833303697266127471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fbe5258e0649d6a197cf01864e31148ade8f9a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-vs09-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-vs09.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-vs09.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bfd3ff2d600000403004730450220443152536095a99352b2e9b3fae6291fbd3cfdc2cf3cbc22ea2f2edd528e9358022100ba1bac2f9b832ec4db219627d4c73a3db563c2fe9961a7ac100efdc586280b6f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bfd3ff2c80000040300473045022012c2b8d3551e226c326d5065a9a6069e3da1e452f6d26af77b888ed2b6423c5a022100db53761fb87f82a4f1d7a4902a6e0101cc76a81432b5b47798671c05030a251f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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