farewellyellowbrickroad.aegpresents.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:9a:51:ae:e9:45:ed:9b:c0:21:14:0d:66:b8:32:c5:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farewellyellowbrickroad.aegpresents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:9a:51:ae:e9:45:ed:9b:c0:21:14:0d:66:b8:32:c5:28
Serial Number (int): 428960907555399956947139231776272521807144
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:3e:9f:43:95:7b:e5:31:8c:6b:af:f5:19:8c:e0:5a:40:39:c3:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:44:9e:a1:6e:d9:08:cc:2c:25:14:3a:ca:0f:0d:7d:ea:b7:12:85
Fingerprint (sha256): 53:cd:d5:39:ae:09:39:92:7c:62:e4:57:10:3c:c0:16:01:0f:30:dc:1d:1f:f9:b1:e0:30:6f:aa:64:0a:ae:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farewellyellowbrickroad.aegpresents.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farewellyellowbrickroad.aegpresents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-ms4-prod.trafficmanager.net
farewellyellowbrickroad.aegpresents.com

Other certificates including the domain name aegpresents.com

(limited to 100 certificates)
khalid.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
aeg-ms20-prod.trafficmanager.net
cert00034-azurecdn.akamaized.net
aeg-ms20-prod.trafficmanager.net
mng-stg.michinoeki-saigai.jp
cert00034-azurecdn.akamaized.net
sa490gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
www.crmbits.com.br
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
roadie.apps.aegpresents.com
aeg-xs06-prod.trafficmanager.net
akamai-san147.exacttarget.com
shawn.asia.aegpresents.com
aeg-xs02-prod.trafficmanager.net
www.crmbits.com.br
elvis-api-prd-lb.apps.aegpresents.com
sa490gl.wpc.edgecastcdn.net
lauv.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
aeg-ms20-prod.trafficmanager.net
www.janithsamee.me
sniad2bgl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
aeg-wt11-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
cert00034-azurecdn.akamaized.net
sa514gl.wpc.edgecastcdn.net
southatlantic.aegpresents.com
aeg-ms19-prod.trafficmanager.net
sa490gl.wpc.edgecastcdn.net
martbhiadmin.estore.business
aeg-xs02-prod.trafficmanager.net
cms.media.aegpresents.com
sniad2bgl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
elvisqa.aegpresents.com
app.keeperhr.com
altjandptm.com
roadie.apps.aegpresents.com
roadie-staging.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
partnerships.aegpresents.com
atlanta.resetconcertseries.com
sa490gl.wpc.edgecastcdn.net
b.aegpresents.com
vendors.stagecoachfestival.com
nashville.aegpresents.com
cert00034-azurecdn.akamaized.net
cert00034-azurecdn.akamaized.net
amex.aegpresents.com
altjandptm.com
farewellyellowbrickroad.aegpresents.com
elvisqa.aegpresents.com
aeg-ms19-prod.trafficmanager.net
roadie.apps.aegpresents.com
drumssiddharth.com
sa514gl.wpc.edgecastcdn.net
click.events.aegpresents.com
elvis-api-prd-lb.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
aeg-xs06-prod.trafficmanager.net
altjandptm.com
snib67cgl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
aeg-xs02-prod.trafficmanager.net
nashville.aegpresents.com
shawn.asia.aegpresents.com
akamai-san147.exacttarget.com
roadie.apps.aegpresents.com
cms.media.aegpresents.com
shawn.asia.aegpresents.com
mi.aegpresents.com
sa490gl.wpc.edgecastcdn.net
staging.aegpresents.com
shawn.asia.aegpresents.com
aeg-ms20-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
staging.aegpresents.com
sa514gl.wpc.edgecastcdn.net
altjandptm.com
www.bacod.xyz
sa490gl.wpc.edgecastcdn.net
farewellyellowbrickroad.aegpresents.com
sa490gl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
partnerships.aegpresents.com
celineevent.aegpresents.com
sa514gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for farewellyellowbrickroad.aegpresents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxYrDuJKk2VwxgH4P2xYE
HZHJzyagFOKWRhgtULqAwAABYXrWnyZzq0JkYR5DYob9maIqB+ZaR5oDxgAkFm6j
mVSHbTr+JrFDyBEHg+eQhmiZqUuKSPSg/MzBONxS8mwO9lSVwnO3h2PNCSdfE23d
rmbGit72+S3TGuOyH/YyD+oUfrjcppEvKF0HVSz3MeT6rbQLI5FDPXw1iLRxAw8o
NR4x8L9G+2T9Klcf6VJ6wHgwIKiJR1lIOgbxNucBvVtUshjBX9MZqcKCNRvikZET
ffy16gT04sjukv7mb9GR/25MTUjsZm1wjW6Yv/5bpsegJx8JKZLxfQF1dh57bsxi
akg4M9MaKct16JLeG3AZ3kaZ3blNvNFONWomjiAhn0SLyIP5V2QoBTdzkNIivLOQ
2OTYKYm/Ltp4f5M3XHM7tw8YSuxfD+ThL1Lji/GdXevw8WDU6gHTflkCmtNrZExM
y6FFzpjKw8SClU7LWdTeMPVVAF3Wg5MXeSIDttlDb6MIkDZBaC9+s7D1X5T/FjkU
T9PAE1PquoRZbUexylGYoJhtV9ju0J5g8YwhW0VIUhyvNKqkYkdFv/VCyH52XerM
UQSlSdIRBnHnkxMFWeQHJsMMWIxKdalj84S0PReaDE3+o1HkVpDYfr9Ho+4M5spe
cgGPKm7pdMUzNXPytB9rSqECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428960907555399956947139231776272521807144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 16:41:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 16:41:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farewellyellowbrickroad.aegpresents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805901248245684940349479181479155158433280709788278626690326874797505327727885015091783343605404790871409767722380143300190164949397772759908218354752478804721579589228134518874276317156859264642759119174051171309007409952245247619491743932956936039085356375708236100669235884172299510691763851906667056492731721545666924694075274569361709839386210223170898995165806559730047153071912554026656049483275746525178047130546112031359557844988726502660317328290407966683334999836252506817813566102768101563589147895223308748683953121407478205872983088831762403468584862250069606093345353423824955929285195951266787968265049373775842169481368545673623990932531709628606315490909783206460649691750348375725397019471265132921608726989588967583003059418596048278591701580289871468548724509844139172200352059597003094885359948597245186347790340842599878030274872905128573151756412847078425785611771552872018772248313381047735779166635982103870718128800001478205299591303656499040482791235556595897384357374764273880729702118178674858166335680449182640764731270164543752152496770514640133406567944280863806825010051438418844158048221776041275860017985199506613330963262240592839727370718252572651690906500805278229931593696221392306841626299041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c3e9f43957be5318c6baff5198ce05a4039c37f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-ms4-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farewellyellowbrickroad.aegpresents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eccda24720000040300483046022100dab44839197d1cfc99f411511218c5365906541c5141c708da693b9c5be81434022100f303b14b3fef5c41e0ac0ca2e9c4b41bdceac3aa113164697896dd5633051e2600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eccda249c000004030046304402205aed6600a3cdebab63776c0f4aa8ba1144d34f063f362084d5a55a4fdf50220c022014b5d916e584638d78a2093f124dcb34f8924bc69148167ca74fb26d789796ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00506a15b21d5b4da79044defd1bba714c3f00a4a6237a5a712ed8b5d8f7909f2347b54c05b4dcc84c09611e0b36206d8e10f79be02603669a17c4d4d66b707871573f91bdc9c09b9ab929bc187795bded22efd2688ce4e6fe1f9b1f0db131a9155f3b6ed811cf755770239e6a053d0a9184110b2ddc6ed72480a1bfdd4368046d97ea8f63730b3515906c7b91879be433c1baddd3f7169d4ca81266ea859f44d02c9c3a4fe2f7b9d7232cc21414c62a689cd035cf44df05ab7abfe9ca2c6fae327a21f75bca5f913a7e7a51fd7780efe6dbdb91438f4782330598373e0efdb7573a963c4fb1f6f68557a81bb156bea5804acdbb6379164155c8d9e11331a882c7