atlanta.resetconcertseries.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f5:52:f1:37:49:95:24:fc:97:3b:d3:c8:b3:ce:1a:bd:85 was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=atlanta.resetconcertseries.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f5:52:f1:37:49:95:24:fc:97:3b:d3:c8:b3:ce:1a:bd:85
Serial Number (int): 431928572783230522175061144411013643943301
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:1e:6a:b9:66:fd:9f:a6:74:bc:73:ea:9f:90:f0:bc:78:de:d9:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:74:c5:65:a6:b5:35:a8:d7:9a:af:9d:a1:0a:ed:f4:78:8b:92:8c
Fingerprint (sha256): 26:26:3f:0c:3a:63:b8:e2:21:14:ef:38:56:02:58:1c:ab:3e:42:0f:40:c2:96:d3:fb:51:c7:57:b9:d0:54:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate atlanta.resetconcertseries.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlanta.resetconcertseries.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlanta.resetconcertseries.com
bayarea.resetconcertseries.com
benplattlive.com
boston.resetconcertseries.com
chicago.resetconcertseries.com
columbus.resetconcertseries.com
covid19waiver.aegpresents.com
covidwaiver.aegpresents.com
dallas.resetconcertseries.com
dmv.resetconcertseries.com
employee-covidwaiver.aegpresents.com
farewellyellowbrickroad.aegpresents.com
lastdinosaurstour.com
losangeles.resetconcertseries.com
lvsweepstakes.com
nashville.resetconcertseries.com
neworleans.resetconcertseries.com
newsletter.aegpresents.com
newsletter.goldenvoice.com
newyork.resetconcertseries.com
nickcannonwildnoutlive.com
rescheduled.aegpresents.com
sandiego.resetconcertseries.com
thesmokersclubfest.com
twitch.bowerypresents.com
vegasrodeoroundup.com
vendors.stagecoachfestival.com
www.benplattlive.com
www.lastdinosaurstour.com
www.lvsweepstakes.com
www.nickcannonwildnoutlive.com
www.thesmokersclubfest.com
www.vegasrodeoroundup.com
zine.bowerypresents.com

Other certificates including the domain name resetconcertseries.com

(limited to 100 certificates)
aeg-xs06-prod.trafficmanager.net
atlanta.resetconcertseries.com
aeg-xs06-prod.trafficmanager.net
resetconcertseries.com
aeg-ms10-prod.trafficmanager.net
aeg-ms10-prod.trafficmanager.net
aeg-ms10-prod.trafficmanager.net
aeg-ms10-prod.trafficmanager.net
aeg-ms10-prod.trafficmanager.net
aeg-xs06-prod.trafficmanager.net
aeg-ms10-prod.trafficmanager.net

Certificate

The complete raw certificate details for atlanta.resetconcertseries.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431928572783230522175061144411013643943301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 23:41:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 23:41:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlanta.resetconcertseries.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950739944818874611861553046280262422249324403528072906536690518794034154064720654193608121835399275798597860847775295259957627875603999835711071995156568343026994579227016441247426776703670975212532020960060254472420502570393323769568330974831915056676388088261324937788217087506321212783384434369594062639266607476697741783074271413622467913722958480995436568462558441758622808037065473544871102606966881146009684758327295043569045683961185303060436648571539574508336063694385117123193017859979960650044054771306048206491427033515971559809945970481228981830953018710561822132323546665569270553097687308236131417629955428773464117083680724855630763639481500494827849815303798114410092111928109044337120012309867005971001787095795525437071608939249777406256892901570835702419536495066554479154493459892302196169777490276499234693263219727773324687916661820960471878919226442996273513986586297882865150907179269807463238315626691343763013990979512263605814274326343781101497345738815107975910229719842648762819837491298647607158975883419162407800140616936101662245273249145431134879335339130440763896123193394120108877632355756577682867216703775496210351528523149401717618404959985442706053068322200856937592533486901064220393731749929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							091e6ab966fd9fa674bc73ea9f90f0bc78ded923
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayarea.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benplattlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbus.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19waiver.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidwaiver.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employee-covidwaiver.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farewellyellowbrickroad.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastdinosaurstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvsweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashville.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleans.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.goldenvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescheduled.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesmokersclubfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegasrodeoroundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendors.stagecoachfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benplattlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastdinosaurstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvsweepstakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesmokersclubfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegasrodeoroundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zine.bowerypresents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee980cd0200000403004630440220115811abd5b0ce89c4ddc195b856518ea56e84a5cd4050e32fe3bb996d38327202207e6f176e83aeb0987af436590b19937364b616c056de3fd61ebebc9c10b821d60076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee980cd12000004030047304502205814b9cc07362b6b4abd9860e051c42fc7bf57e9432d3fe15cf92c78572bb653022100eb288faa9bccc0f46d6b3e6120e15b0eaf356a95d585b24e29aab2547f477299
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007be7ec20b7d5b3e7732103e366d85bb5e105410fe0ab00024cc8b20955edeb80055fceaecf310d322a6c4c183b33a8cc99dd9131c58a08fde6db15c55290367c7563fc15bc2a9958def7250cbe8768b58eea44681a2d14c5aaa98d36debef2f364b56a40feac5edc83fe0cf31703bcc935854bdd2b0214eba3a489d3913d87be1f2aea4a48208d096542fe4957838e0b08c2e061aae320c9c744d53aa87c198b52a53c5bcf4b5585e4e522a1d8055243b36c9981ceaee1b89085905ab000ef997a3b4f42dcbc30a945c924144c3a33d40e71eb8ab69d8860fd6e3c97eb6cc22c9b876d55162718be7b107a74059cabef8c329c422a6c4a01ef91ff08a2e8dcca