bowerypresents.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:9d:e4:a0:4f:e5:3d:d3:b4:e1:cb:f3:ca:6a:b5:75:7c was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bowerypresents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:9d:e4:a0:4f:e5:3d:d3:b4:e1:cb:f3:ca:6a:b5:75:7c
Serial Number (int): 298977794047121456887962355186179740366204
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:02:65:43:12:88:83:5a:ab:bb:17:7a:bb:8e:d5:fc:a4:2c:45:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:78:72:a5:8a:ed:d7:2e:87:ad:e9:e2:76:fb:96:9c:92:66:0e:97
Fingerprint (sha256): 5d:3f:03:e0:81:f2:40:35:d1:33:1d:69:bc:cb:6a:ce:77:7e:32:69:a8:50:c5:3e:3a:a1:d1:38:2b:f3:1f:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bowerypresents.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bowerypresents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt11-prod.trafficmanager.net
aeg-wt11.us-central1.gce.aegp.cloud
aeg-wt11.us-west1.gce.aegp.cloud
aegpresents.com
alecbenjamintour.com
ateezlive.com
bowerypresents.com
daynvegas2019.com
daynvegas2021.com
denverconcerttruck.com
dodojacathotpinkdet.com
dojacathotpinkdet.com
ducksauceblockparty.com
electricforestfestival.com
fallenemberstour.com
franklinmusichall.com
gapkatyperry.com
go.gce.aegp.cloud
goodiebaghabit.com
kanebrownfanpass.com
litaftour.com
marymoorconcerts.com
ohinvertedworldtour.com
riverdance.bowerypresents.com
salesforce.apps.aegpresents.com
secretskyfest.com
stillwoozytour.com
tameimpalalive.com
thesinclair10.bowerypresents.com
thestageatsuffolkdowns.com
www.alecbenjamintour.com
www.ateezlive.com
www.daynvegas2019.com
www.daynvegas2021.com
www.denverconcerttruck.com
www.dodojacathotpinkdet.com
www.dojacathotpinkdet.com
www.ducksauceblockparty.com
www.electricforestfestival.com
www.fallenemberstour.com
www.franklinmusichall.com
www.gapkatyperry.com
www.goodiebaghabit.com
www.kanebrownfanpass.com
www.litaftour.com
www.marymoorconcerts.com
www.ohinvertedworldtour.com
www.riverdance.bowerypresents.com
www.secretskyfest.com
www.stillwoozytour.com
www.tameimpalalive.com
www.thestageatsuffolkdowns.com

Other certificates including the domain name bowerypresents.com

(limited to 100 certificates)
sni8374gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
akamai-san147.exacttarget.com
sa5gl.wpc.edgecastcdn.net
aeg-wt11-prod.trafficmanager.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
sa336gl.wpc.edgecastcdn.net
altjandptm.com
sa367gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
altjandptm.com
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
atlanta.resetconcertseries.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
altjandptm.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa5gl.wpc.edgecastcdn.net
altjandptm.com
altjandptm.com
sa281gl.wpc.edgecastcdn.net
sa336gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
www.bowerypresents.com
akamai-san147.exacttarget.com
houselist.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa336gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
staging.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
altjandptm.com
www.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
altjandptm.com
sa281gl.wpc.edgecastcdn.net
bowerypresents.com
sa376gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
aeg-wt11.us-west1.gce.aegp.cloud
altjandptm.com
sa376gl.wpc.edgecastcdn.net
altjandptm.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
entry.bowerypresents.com
aeg-wt11-prod.trafficmanager.net
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.prod.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
media.bowerypresents.com
sa336gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
sa376gl.wpc.edgecastcdn.net
bowerypresents.com
covidwaiver.aegpresents.com
stg-media.bowerypresents.com
riverdance.bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa367gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
www.staging.bowerypresents.com
riverdance.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
sa336gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa336gl.wpc.edgecastcdn.net
aeg-wt11-prod.trafficmanager.net

Certificate

The complete raw certificate details for bowerypresents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298977794047121456887962355186179740366204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 22:20:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 22:20:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bowerypresents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681776461185592176844252560085265395238718856025733470107181015196932580071238311515387564066878906822309877414041086246452274671871189458981602751974859190008379563486089869072860511937471042882385965815885829674205013912386431303398153000227396687302100890637572488387866163375466181978176718076578247526354093120863021808952544597737601085318760897282414716840080534716938949084163536356612620435159823412320770435807848812406817340141759673322904731420823126978886476976996467026484007797081440580930860638975521500925130230490529121875371925329395954088440646306416165324005868686320402209060401354657566922617514926048870836934500918520985490997401791188519680668743840165483926664550161335564238773587732935956880630063744726973350682463881689578303976126060739384570875276880976612219273900706624704587902271330879752303299795030184518956851307448589587374983572930452337421503211234887758527638503548295908805057620439023962173196450591395890227248093911431271113500331824938662839572128145129787902085746759560089576852529366039568166990947110916276796038867891077591963853132452312231821740842121710649565998109135353570279085287352888399240585199024457095452544185901539673670785374871630931901212768113114297409216789043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe0265431288835aabbb177abb8ed5fca42c45ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesinclair10.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184eee39cf8000004030048304602210094396c05525487d0b02472eb77b1235ab39f9f865dc3fa1404c74c5f94c69f73022100af7d5b278a2928020d4684e78ad99de7404f5a110efaa1d59dc31d54ba1411060075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000184eee39f0f000004030046304402203eef90c6d717eab3f5ca8e41693ea7241f59aa795983407496ec4542d6162dd902205f3006d618ad48b545c0bcd11e92731a47207336a254a4469c1fd917636fb0de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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