aeg-bowerypresents-staging.trafficmanager.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:80:25:ac:b5:a7:8a:55:41:4b:b7:d3:e5:02:33:c2:8e:c4 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aeg-bowerypresents-staging.trafficmanager.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:80:25:ac:b5:a7:8a:55:41:4b:b7:d3:e5:02:33:c2:8e:c4Serial Number (int): 392055364888214873186692173218315973594820
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: eb:80:59:55:7d:8c:b1:e0:63:11:ad:cd:94:5f:a1:12:d0:a4:b4:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fa:65:11:04:09:84:c8:fd:08:3b:b6:93:a1:73:cb:84:f5:86:c7:db
Fingerprint (sha256): 4a:fb:e1:d0:68:d7:b6:f7:d0:6c:64:97:f3:ae:32:0a:3e:2e:4a:5e:64:1a:92:c4:b9:b7:47:dc:f2:9a:4c:15
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate aeg-bowerypresents-staging.trafficmanager.net
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aeg-bowerypresents-staging.trafficmanager.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aeg-bowery-stg.us-central1.gce.aegp.cloud
aeg-bowery-stg.us-west1.gce.aegp.cloud
aeg-bowerypresents-staging.trafficmanager.net
aeg-bowery-stg.us-west1.gce.aegp.cloud
aeg-bowerypresents-staging.trafficmanager.net
Other certificates including the domain name trafficmanager.net
(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
francecentral.prod.api.medeina.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
francecentral.prod.api.medeina.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com
Certificate
The complete raw certificate details for aeg-bowerypresents-staging.trafficmanager.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgISBIAlrLWnilVBS7fT5QIzwo7EMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzAxNjM3NTFaFw0x OTEwMjgxNjM3NTFaMDgxNjA0BgNVBAMTLWFlZy1ib3dlcnlwcmVzZW50cy1zdGFn aW5nLnRyYWZmaWNtYW5hZ2VyLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAMwJzc0Ren+l4znP/bQG44VgjMtS1kZwo4qncrgifHk+dnQKAM/wMLtO fQkk969ByNbvybw26K6FxbSV2xBSrdxP78hSf897UmUN7OzK6cdF3Hh7QNkbVX+0 I57bnhLe5Ad4DJXPAi8PmXPrtzZksRTckXAp5HrghF+Qli8UOaE2v9L2k2xCw9ZL qYy6g43xpVnVklH51taK+Ytgg9hlg7JiDnpSH4Xc4wM9s7MdspZ+3p83o+m/UWM3 xvdlSZsK43fcFcR0rLwDEGhCdl4Ep8RF+TFeR/27y48jd/6EdUSf2AEvmkfwhN1O riYLA1yIOmNf7kKaVdko1LIbxIW+pWfj5hzgkEKmp5+iOiwumds5unIJAmNtJgHX 98WDNymkYSMr2K6XpRICTMMurr5OJQ85C/w52B5t3ehaDbNWMJGTJxxIZ/xzJb7C 17G4lKkDtYyVEogfCRnwflL+Mc8mPEGRebZf9wBiSdE4p3UxZvMhQGwAyyJ5MSkJ t+boHjqZCYAoZWaImcK0fuOulo4byT/p9QrcqB0icRVWeIbjsn6FoXoGV2/fct6T YV5dUDffccodKQv44f3VWKgEUSiZPaFtl4dSO2oHqyP5KF9I6Sih0y9WWqcYnfPZ OygVDE0PAh2yXVk7kRSJdAOUwcMOb2NS4awTCUzJGEFD7iGoa8ePAgMBAAGjggLX MIIC0zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOuAWVV9jLHgYxGtzZRfoRLQpLTB MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wgY0GA1UdEQSBhTCBgoIpYWVnLWJvd2VyeS1zdGcudXMtY2VudHJhbDEuZ2Nl LmFlZ3AuY2xvdWSCJmFlZy1ib3dlcnktc3RnLnVzLXdlc3QxLmdjZS5hZWdwLmNs b3Vkgi1hZWctYm93ZXJ5cHJlc2VudHMtc3RhZ2luZy50cmFmZmljbWFuYWdlci5u ZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWxD 9bJBAAAEAwBGMEQCIGlWHQO2ixeCxKHH551TjGNgd/6lcvJpojssWfzf+GuPAiBM Z1wHzbN78irPHcXCBAqbX2duEs4NsRX3piJ6+9+U0gB2ACk8UZZUyDlluqpQ/FgH 1Ldvv1h6KXLcpMMM9OVFR/R4AAABbEP1tAAAAAQDAEcwRQIgOMXRoc8xfgl54cXR aFU9ZdXddPg06YnpdgjS+10N/v4CIQCRxRgY47myVojO/VcofAISslhr1V2T3HTl wqhEyk3A4DANBgkqhkiG9w0BAQsFAAOCAQEAY8IDVTNyBXaYYeKMAFZGwp7BeGTE h1zPecdi8PEavTN45W/ZboCDAMCoGwtOhyJhY7nmfBZ58w1zG4tPa6oATpu0XcPz OvZU9FtZV/mDJdRDl5uQ8UP8g86dBAEgExImx7qcpMSMbVrbLvijcGzYF13Mz9J1 MXA+7ItYUB+pLcMU647cRaikQpCfIhl5m4s6rbMcQ441XJH70ksZxAfdgD4+yySg /iZrzbMBeRhuJ91mXBIH690s347j13BL5k97kQ2bBgHX1KRps0GvtZvyW14JQDvr aAgnjhzpFUT7dkblaLT+9TgkmMpEkIBOW2S1298TZJMluBCeWIXI1LiGnA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzAnNzRF6f6XjOc/9tAbj hWCMy1LWRnCjiqdyuCJ8eT52dAoAz/Awu059CST3r0HI1u/JvDboroXFtJXbEFKt 3E/vyFJ/z3tSZQ3s7Mrpx0XceHtA2RtVf7QjntueEt7kB3gMlc8CLw+Zc+u3NmSx FNyRcCnkeuCEX5CWLxQ5oTa/0vaTbELD1kupjLqDjfGlWdWSUfnW1or5i2CD2GWD smIOelIfhdzjAz2zsx2yln7enzej6b9RYzfG92VJmwrjd9wVxHSsvAMQaEJ2XgSn xEX5MV5H/bvLjyN3/oR1RJ/YAS+aR/CE3U6uJgsDXIg6Y1/uQppV2SjUshvEhb6l Z+PmHOCQQqann6I6LC6Z2zm6cgkCY20mAdf3xYM3KaRhIyvYrpelEgJMwy6uvk4l DzkL/DnYHm3d6FoNs1YwkZMnHEhn/HMlvsLXsbiUqQO1jJUSiB8JGfB+Uv4xzyY8 QZF5tl/3AGJJ0TindTFm8yFAbADLInkxKQm35ugeOpkJgChlZoiZwrR+466WjhvJ P+n1CtyoHSJxFVZ4huOyfoWhegZXb99y3pNhXl1QN99xyh0pC/jh/dVYqARRKJk9 oW2Xh1I7agerI/koX0jpKKHTL1Zapxid89k7KBUMTQ8CHbJdWTuRFIl0A5TBww5v Y1LhrBMJTMkYQUPuIahrx48CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392055364888214873186692173218315973594820 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 16:37:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 16:37:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-bowerypresents-staging.trafficmanager.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832403626066248475667935472809817904177449078839819145824792703959641383759943141635203803923233974533846871682780028351752157490336174126420361767212629620339256027322294303391036223253974136124644544732366395856475907218626567833961445770508004546790193137962294507386660292161612677936285007093855255015232145164788316315610080687580054968562037257062792995977075615283361265436547529124184928109758382662600998578130057894145263352029558022106127550801226622406547361901947220322593433615448829134525329292484666598652732502559831169242141950239374794139791785338601676978786012474000610853100617094384047734126348011806567373384772139994085413075799561447258227413589813219588410831567152627574488123447496505571929828464429443945614105639719671730838876648225942385461142906386755542295131277486878982631227769046688389436551140518137890069456766843373454777270791609008028843286762249769530728478658476011348493872758807164261945235754316095161221567796073029948721472025615095502000963846932955532716945965358910922262667732492764349085043903209042742924009248278143178933541840930486883219511666101123592166895897001391457020425412422052485762981667380715848896830951058359058388315983841909666309033342328729735394036008847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eb8059557d8cb1e06311adcd945fa112d0a4b4c1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-bowery-stg.us-central1.gce.aegp.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-bowery-stg.us-west1.gce.aegp.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-bowerypresents-staging.trafficmanager.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c43f5b2410000040300463044022069561d03b68b1782c4a1c7e79d538c636077fea572f269a23b2c59fcdff86b8f02204c675c07cdb37bf22acf1dc5c2040a9b5f676e12ce0db115f7a6227afbdf94d2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c43f5b4000000040300473045022038c5d1a1cf317e0979e1c5d168553d65d5dd74f834e989e97608d2fb5d0dfefe02210091c51818e3b9b25688cefd57287c0212b2586bd55d93dc74e5c2a844ca4dc0e0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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