aeg-wt18-prod.trafficmanager.net

Issued by R3

About this certificate

This digital certificate with serial number 04:a6:53:26:3d:c3:2e:4c:3c:d3:dc:7c:e5:e6:ad:72:8b:70 was issued on by Let's Encrypt.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-wt18-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a6:53:26:3d:c3:2e:4c:3c:d3:dc:7c:e5:e6:ad:72:8b:70
Serial Number (int): 405046541119538349851414337063265766640496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:f7:97:d5:b2:76:84:d2:2e:91:29:8a:01:d3:ce:0c:8b:88:7d:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:52:10:7c:ba:11:d0:05:42:9c:90:37:94:10:25:2c:1d:d3:5c:8d
Fingerprint (sha256): 1d:00:7c:b2:58:67:0a:e9:b9:e5:8e:03:a3:e6:86:47:db:dd:82:b4:a6:2a:8c:f0:f2:6b:14:31:e3:1b:df:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-wt18-prod.trafficmanager.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-wt18-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt18-prod.trafficmanager.net
aeg-wt18.us-central1.gce.aegp.cloud
aeg-wt18.us-west1.gce.aegp.cloud
aegliveevents.com
altjandptm.com
bobmosesla.com
btsexhibitionus.com
davidblaineinvegas.com
freewaterblockparty.com
goldenvoicecybermonday.com
goldenvoicevalentines.com
herefornowtour.com
jojinectartour.com
lane8la.com
magicalthinkingtour.com
marcrebillettour.com
moonmanslanding.com
natenyc.com
neckdeepdistortionstour.com
oncetwicemelodytour.com
the1975dxb.com
thethrivetour.com
www.aegliveevents.com
www.altjandptm.com
www.bobmosesla.com
www.btsexhibitionus.com
www.davidblaineinvegas.com
www.freewaterblockparty.com
www.goldenvoicecybermonday.com
www.goldenvoicevalentines.com
www.herefornowtour.com
www.jojinectartour.com
www.lane8la.com
www.magicalthinkingtour.com
www.marcrebillettour.com
www.moonmanslanding.com
www.natenyc.com
www.neckdeepdistortionstour.com
www.oncetwicemelodytour.com
www.the1975dxb.com
www.thethrivetour.com
www.zeromilepresentsgetlucky.com
zeromilepresentsgetlucky.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
dev.eastus2.paperboy.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
ML1PrdApp07.prod.idns.azure.net
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
southeastasia.prod.api.medeina.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
CBN09PrdApp01.prod.idns.azure.net
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
ptm-pqs-0.cbr.p.prometheusmetrics.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
tm-cxpes-prod-hipri.trafficmanager.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
BY5PrdApp03.prod.idns.azure.net
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
ic3he-ge-prod.teams.microsoft.com
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
tm-cxpes-prod-oslocom.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com

Certificate

The complete raw certificate details for aeg-wt18-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405046541119538349851414337063265766640496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 19:01:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 19:01:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-wt18-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796724372422965425876014113003212015223954090613719674482273415020675592109279311680907906617300148371341871479540391689607105577041872482859227120226311678631707400346269265181606080047691633263850177135594066917705944438862018390144126312852011236723678093154275998421778530186039987739057921258329798479507730568327197820720965682056944236895216322091806727001231216678635170910115451063989787341623310459265280348088107706651927482183916224170497322829058969480719185460915630229846848677691148433162974084049218203010610311511599232605876892465576556611654202975452238176823336603294214535313556851434904051238827638390832489080533117301508236394834663386561068478043010989356915184519318966048120968707650923492520168997775236307343307867611894966267431358212099615274549852478182138173020984281121239599871843004123092247345467752784648041675413984664580397740915104425790373187180363940392965634134604695711525898491900223501045699645197540463611246388482403167908674656456770523373067180564053940850219339937396467945775812990477768494628960323494625167051972735227792098491357194690706335296236220662615313653470162919674771859452462447276988280493635456940958253492600690275679476609399352359183103381327996167531574230691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbf797d5b27684d22e91298a01d3ce0c8b887d40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegliveevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altjandptm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobmosesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsexhibitionus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidblaineinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freewaterblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvoicecybermonday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvoicevalentines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herefornowtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojinectartour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lane8la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicalthinkingtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcrebillettour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonmanslanding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckdeepdistortionstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncetwicemelodytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the1975dxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thethrivetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegliveevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altjandptm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobmosesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btsexhibitionus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidblaineinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freewaterblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvoicecybermonday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvoicevalentines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herefornowtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jojinectartour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lane8la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicalthinkingtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcrebillettour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonmanslanding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neckdeepdistortionstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oncetwicemelodytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the1975dxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thethrivetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeromilepresentsgetlucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeromilepresentsgetlucky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188fe729c40000004030047304502204f7ca81379f8240f5cf31a2394edfd25dcf69979bb89f0809566876bc6ff4483022100c42f8c7628d746a49630d2ec66761d2a431e8bdace11cce1e6381d1d81dcf1a3007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188fe729c5f000004030047304502203cfa7ec01a32c52dde62fa4dd7a586f5116456a8e697f7726d0cd17ddd3a8c41022100ab63e6382410e9ce69b4fa7c92e4f75e4720b60bd059102cd69494b0bd7f5605
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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