aeg-xs06-prod.trafficmanager.net

Issued by R3

About this certificate

This digital certificate with serial number 03:db:5d:d0:18:62:da:0e:6f:f2:d9:51:1a:4d:37:4e:d4:ae was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aeg-xs06-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:5d:d0:18:62:da:0e:6f:f2:d9:51:1a:4d:37:4e:d4:ae
Serial Number (int): 335983394846930511458480500014356177540270
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:f0:fb:ea:8b:8d:d9:43:72:8a:c6:78:8e:fa:6f:4f:ba:f3:24:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:ac:34:bd:65:a2:94:21:cd:f7:86:fc:7e:2a:ea:a6:fa:4c:7e:a0
Fingerprint (sha256): 37:87:27:6d:5c:c8:4f:86:53:4a:af:70:b2:fc:e2:74:36:9d:bb:94:26:f3:ca:7d:89:f9:0e:c1:d1:dc:4e:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-xs06-prod.trafficmanager.net

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-xs06-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-xs06-prod.trafficmanager.net
aeg-xs06.us-central1.gce.aegp.cloud
aeg-xs06.us-west1.gce.aegp.cloud
atlanta.resetconcertseries.com
bayarea.resetconcertseries.com
boston.resetconcertseries.com
chicago.resetconcertseries.com
columbus.resetconcertseries.com
dallas.resetconcertseries.com
dc.resetconcertseries.com
dmv.resetconcertseries.com
losangeles.resetconcertseries.com
nashville.resetconcertseries.com
neworleans.resetconcertseries.com
newyork.resetconcertseries.com
rockymountains.aegpresents.com
sandiego.resetconcertseries.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
*.falconprod-sf.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com
*.azurequota-prod.trafficmanager.net
e2e.bvd.services.skypeforbusiness.net
eastus2euap-a.ambackend.trafficmanager.net
jackson-tm.trafficmanager.net
frontend2.os1.prod.idns.azure.net
wing.trafficmanager.net
oikcm-perf-prod-wus299.cloudapp.net
prd.audience.teams.trafficmanager.net

Certificate

The complete raw certificate details for aeg-xs06-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335983394846930511458480500014356177540270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 13:40:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 13:40:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-xs06-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821665347192246313781555020097697665373872833489496634774095836166755787748941638294995385249689881717683774027661358366934784250614131925006240439842205755454999064669289849187091201272631383530789057448371385665135525566650344962106445325632430034882124590433674074005852889812982279696858675725160171056631334519788158128728216271483085313204455146492634868568793427023386791986659870833819026272150434314782551397783830429115127341163812734954466101259175229062398918571178669869864723840832155582501020227430767425537918214368117217743641485669528880929142780449145855750559086226650083778591869289832129237059947057432099520091654003370618632399529621402392784500356353784305633822246962747485370277551347108985199016316994907518776238035425607086918912512374735078715458835048478527431122176481366202549158579303919096434376033153395235421497532752145517972067753793504587042227073757020253880434679541746896104876685712409108065771066062749148354448873633060611119228227922019993142356462671588732042052048545277077453342974732103071511040299318727584812383775250662232985753975635844635340033071070392418954743224649088875710286924790081689129096548842047094319028671508092907687371251384054217358981145442372992995554489431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43f0fbea8b8dd943728ac6788efa6f4fbaf324ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayarea.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbus.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashville.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleans.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockymountains.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego.resetconcertseries.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b433b14fa0000040300473045022035d31e7e623da696c9eb19b23ac4ae57c6cf74ad514acd604df90dac670e130e022100d9c82faf5d30bbbfa1daf6d8207504ed512bd118b19095a67955f4411cfd08360075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b433b14ee000004030046304402204932920aa1796ece57fd53b6cc8bedfc7f740d7b1c6a3412fd5e41dd1f08a85e02204565ecb1d2129592bbda5d0f62444187cd261570ff5beb39aee5eff99fcf4845
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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