aeg-wt11.us-west1.gce.aegp.cloud

Issued by R3

About this certificate

This digital certificate with serial number 03:65:72:ac:34:91:82:bf:ad:e4:63:d3:63:04:0d:c8:2d:bf was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aeg-wt11.us-west1.gce.aegp.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:65:72:ac:34:91:82:bf:ad:e4:63:d3:63:04:0d:c8:2d:bf
Serial Number (int): 295857802987088520881281639745027993775551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:ae:97:00:b3:19:d8:11:a0:53:e6:99:34:8f:0d:79:04:33:b9:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:46:5c:d5:1e:5a:2e:1e:3d:f5:c8:be:a2:b6:ff:d1:59:33:45:09
Fingerprint (sha256): 1e:ab:7b:2f:14:5a:85:48:b8:c5:cc:42:16:4e:98:ed:b3:06:26:14:76:b9:cc:72:c6:b2:41:1e:bc:4d:4a:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-wt11.us-west1.gce.aegp.cloud

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-wt11.us-west1.gce.aegp.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt11.us-central1.gce.aegp.cloud
aeg-wt11.us-west1.gce.aegp.cloud
aegpresents.com
aegpresentslive.com
aegpresentslv.com
alecbenjamintour.com
ateezlive.com
bowerypresents.com
daynvegas2019.com
daynvegas2021.com
denverconcerttruck.com
dodojacathotpinkdet.com
dojacathotpinkdet.com
ducksauceblockparty.com
electricforestfestival.com
fallenemberstour.com
franklinmusichall.com
gapkatyperry.com
go.gce.aegp.cloud
goodiebaghabit.com
jointhemovement.live
kanebrownfanpass.com
litaftour.com
madisonhousepresents.com
marymoorconcerts.com
mikeepps2022.com
ohinvertedworldtour.com
partnerships.aegpresents.com
regeneratefestivalcolorado.com
riverdance.bowerypresents.com
roadrunnerbirthday.bowerypresents.com
salesforce.apps.aegpresents.com
secretskyfest.com
shop.cruelworldfest.com
stillwoozytour.com
tameimpalalive.com
thesinclair10.bowerypresents.com
thestageatsuffolkdowns.com
virdaswantedtour.com
willofthepeopletour.com
www.aegpresentslive.com
www.aegpresentslv.com
www.alecbenjamintour.com
www.ateezlive.com
www.daynvegas2019.com
www.daynvegas2021.com
www.denverconcerttruck.com
www.dodojacathotpinkdet.com
www.dojacathotpinkdet.com
www.ducksauceblockparty.com
www.electricforestfestival.com
www.fallenemberstour.com
www.franklinmusichall.com
www.gapkatyperry.com
www.goodiebaghabit.com
www.jointhemovement.live
www.kanebrownfanpass.com
www.litaftour.com
www.madisonhousepresents.com
www.marymoorconcerts.com
www.mikeepps2022.com
www.ohinvertedworldtour.com
www.regeneratefestivalcolorado.com
www.riverdance.bowerypresents.com
www.secretskyfest.com
www.stillwoozytour.com
www.tameimpalalive.com
www.thestageatsuffolkdowns.com
www.virdaswantedtour.com
www.willofthepeopletour.com

Other certificates including the domain name aegp.cloud

(limited to 100 certificates)
aeg-ss13-prod.trafficmanager.net
aeg-ms2-prod.trafficmanager.net
aeg-ss33-prod.trafficmanager.net
aeg-ms5-prod.trafficmanager.net
aeg-ss34-prod.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
www.stagecoachfestival.com
aeg-fs41-prod.trafficmanager.net
aeg-ms25-prod.trafficmanager.net
aeg-ms25-prod.trafficmanager.net
aeg-vs07-prod.trafficmanager.net
aeg-xs06-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
aeg-ss27-prod.trafficmanager.net
aeg-ss18-prod.trafficmanager.net
aeg-ms30-prod.trafficmanager.net
aeg-do04-dev.trafficmanager.net
aeg-wt04-prod.trafficmanager.net
aeg-gs01-prod.trafficmanager.net
aeg-ms2-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-wt11-prod.trafficmanager.net
aeg-fs41-prod.trafficmanager.net
aeg-gs05-prod.trafficmanager.net
aeg-ss29-prod.trafficmanager.net
aeg-ss05-prod.trafficmanager.net
aeg-fs41-prod.trafficmanager.net
aeg-ms6-prod.trafficmanager.net
aeg-fs24-prod.trafficmanager.net
aeg-ss07-prod.trafficmanager.net
aeg-gs03-prod.trafficmanager.net
aeg-fs22-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
variety-playhouse.com
aeg-wt06-prod.trafficmanager.net
giveaways.apps.aegpresents.com
aeg-ruj4cz7n-prod.trafficmanager.net
aeg-wt18-prod.trafficmanager.net
aeg-vs10-prod.trafficmanager.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
aeg-vs07-prod.trafficmanager.net
aeg-ss15-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-vs07-prod.trafficmanager.net
aeg-fs38-prod.trafficmanager.net
aeg-ss19-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
aeg-ss25-prod.trafficmanager.net
aeg-ms15-prod.trafficmanager.net
aeg-ms38-prod.trafficmanager.net
aeg-ss16-prod.trafficmanager.net
aeg-gs02-prod.trafficmanager.net
aeg-vs02-prod.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
aeg-ss07-prod.trafficmanager.net
aeg-ss09-prod.trafficmanager.net
aeg-wt14-prod.trafficmanager.net
aeg-ss03-prod.trafficmanager.net
aeg-vs06-prod.trafficmanager.net
aeg-ruj4cz7n-prod.trafficmanager.net
aeg-wt07-prod.trafficmanager.net
aeg-ss17-prod.trafficmanager.net
aeg-ms16-prod.trafficmanager.net
aeg-vs26-prod.trafficmanager.net
aeg-xs06-prod.trafficmanager.net
aeg-ss05-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
variety-playhouse.com
aeg-ss07-prod.trafficmanager.net
aeg-do01-dev.trafficmanager.net
aeg-ms23-prod.trafficmanager.net
giveaways.apps.aegpresents.com
aeg-ss12-prod.trafficmanager.net
aeg-ss04-prod.trafficmanager.net
aeg-do03-dev.trafficmanager.net
aeg-fs29-prod.trafficmanager.net
aeg-wt12-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-aegpresents-dev.trafficmanager.net
aeg-vs10-prod.trafficmanager.net
aeg-fs05-prod.trafficmanager.net
aeg-do04-dev.trafficmanager.net
aeg-fs23-prod.trafficmanager.net
aeg-ms22-prod.trafficmanager.net
aeg-vs03-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
aeg-fs05-prod.trafficmanager.net
aeg-fs02-prod.trafficmanager.net
aeg-ss17-prod.trafficmanager.net
aeg-ms24-prod.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
variety-playhouse.com
bowerypresents.com
aeg-fs41-prod.trafficmanager.net
aeg-fs21-prod.trafficmanager.net

Certificate

The complete raw certificate details for aeg-wt11.us-west1.gce.aegp.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m3EBYPT70/fvwHOa9rI
VacSiD/kJ+2PnDnESndxK9RxsdfcwHy53SZh42WAQiF9Qcur+qpUGohCC9gv6FHY
o0rwmxzIVJM6rIZuW4gxFSRrB/cY/g+L7PO32pGzOz7DqrNvFcJvgqp8UNMzAMj6
J2eW12QdhEnMu3ufsWVzS+Y94v/4paDM3Wnx/th0U20wFPbCOdXppVHy05PQU/d0
pQHYH+Y8+/0Sjcq9MKFnMUvS9VH1aiUZgG0e0BdiTqH4nQQ+ByqyF9XDPKVwmUMO
dhL8QG4638Y/bhN2iiV0BLUBUEvq7zT0ReKqNYUWkSQ451aZjTDLw8iljG51BpFa
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295857802987088520881281639745027993775551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 13:15:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 13:15:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27069124751278274010397825615234899513376702466324164379048631725431106228637990468628112632889163042462649933658617806706497210608970615295182063709751161533472983898858500547766065803886397197224953211082654750402386321903379235990110681653529188050571663393243017489428467303055784558064278289535481653639639365396818485995469962091726502918826177325537107201172264409115065857903296241388963054547793201736170588419002639727966124750497863591274133805190360210088236050585577698881922630899955156715582835267750304736506453509847029246643301394920921230586166850332549972966433572759114624447313075986192636402291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92ae9700b319d811a053e699348f0d790433b936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerships.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnerbirthday.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cruelworldfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesinclair10.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willofthepeopletour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willofthepeopletour.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e51eb30e4000004030046304402202169d5fb28c5aa5dbd418dba8bfd1208512c56b255a4ee76985141bc214dd43302200431401b0a2c6fb1948c73c0fbdc21b303a5c69cd648f77bd86685b38e384e92007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e51eb30a90000040300473045022100a9ccc99fa119c564752a862bc67e5338c756d679d90d2a32324ba5050462595d0220403d9b99b59c02696e6b0c405b773fdb38c990f18b1c3f541d18fb6b2bd116f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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