aeg-wt11.us-west1.gce.aegp.cloud

Issued by R3

About this certificate

This digital certificate with serial number 03:5a:2a:8e:83:a0:89:15:0e:05:3e:fa:09:2f:5b:1b:80:d8 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aeg-wt11.us-west1.gce.aegp.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:2a:8e:83:a0:89:15:0e:05:3e:fa:09:2f:5b:1b:80:d8
Serial Number (int): 292018838369856669044409382567369670099160
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:5d:63:75:a9:4f:72:10:d5:5a:9e:6b:aa:81:ef:65:65:60:62:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:d3:98:ed:0d:06:40:9b:f8:c4:1c:17:4e:9a:08:f7:66:61:d9:d3
Fingerprint (sha256): 6a:1e:0b:7e:da:50:75:e1:18:b9:05:3e:7f:7f:dd:b7:46:3a:e7:e9:d5:fa:d3:87:92:f1:73:f9:09:ce:7b:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-wt11.us-west1.gce.aegp.cloud

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-wt11.us-west1.gce.aegp.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt11.us-central1.gce.aegp.cloud
aeg-wt11.us-west1.gce.aegp.cloud
aegpresents.com
aegpresentslive.com
aegpresentslv.com
alecbenjamintour.com
ateezlive.com
bowerypresents.com
daynvegas2019.com
daynvegas2021.com
denverconcerttruck.com
dodojacathotpinkdet.com
dojacathotpinkdet.com
ducksauceblockparty.com
electricforestfestival.com
fallenemberstour.com
franklinmusichall.com
gapkatyperry.com
go.gce.aegp.cloud
goodiebaghabit.com
jointhemovement.live
kanebrownfanpass.com
litaftour.com
madisonhousepresents.com
marymoorconcerts.com
mikeepps2022.com
ohinvertedworldtour.com
partnerships.aegpresents.com
regeneratefestivalcolorado.com
riverdance.bowerypresents.com
roadrunnerbirthday.bowerypresents.com
salesforce.apps.aegpresents.com
secretskyfest.com
shop.cruelworldfest.com
stillwoozytour.com
tameimpalalive.com
thesinclair10.bowerypresents.com
thestageatsuffolkdowns.com
virdaswantedtour.com
willofthepeopletour.com
www.aegpresentslive.com
www.aegpresentslv.com
www.alecbenjamintour.com
www.ateezlive.com
www.daynvegas2019.com
www.daynvegas2021.com
www.denverconcerttruck.com
www.dodojacathotpinkdet.com
www.dojacathotpinkdet.com
www.ducksauceblockparty.com
www.electricforestfestival.com
www.fallenemberstour.com
www.franklinmusichall.com
www.gapkatyperry.com
www.goodiebaghabit.com
www.jointhemovement.live
www.kanebrownfanpass.com
www.litaftour.com
www.madisonhousepresents.com
www.marymoorconcerts.com
www.mikeepps2022.com
www.ohinvertedworldtour.com
www.regeneratefestivalcolorado.com
www.riverdance.bowerypresents.com
www.secretskyfest.com
www.stillwoozytour.com
www.tameimpalalive.com
www.thestageatsuffolkdowns.com
www.virdaswantedtour.com
www.willofthepeopletour.com

Other certificates including the domain name aegp.cloud

(limited to 100 certificates)
aeg-ss13-prod.trafficmanager.net
aeg-ms2-prod.trafficmanager.net
aeg-ss33-prod.trafficmanager.net
aeg-ms5-prod.trafficmanager.net
aeg-ss34-prod.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
www.stagecoachfestival.com
aeg-fs41-prod.trafficmanager.net
aeg-ms25-prod.trafficmanager.net
aeg-ms25-prod.trafficmanager.net
aeg-vs07-prod.trafficmanager.net
aeg-xs06-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
aeg-ss27-prod.trafficmanager.net
aeg-ss18-prod.trafficmanager.net
aeg-ms30-prod.trafficmanager.net
aeg-do04-dev.trafficmanager.net
aeg-wt04-prod.trafficmanager.net
aeg-gs01-prod.trafficmanager.net
aeg-ms2-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-wt11-prod.trafficmanager.net
aeg-fs41-prod.trafficmanager.net
aeg-gs05-prod.trafficmanager.net
aeg-ss29-prod.trafficmanager.net
aeg-ss05-prod.trafficmanager.net
aeg-fs41-prod.trafficmanager.net
aeg-ms6-prod.trafficmanager.net
aeg-fs24-prod.trafficmanager.net
aeg-ss07-prod.trafficmanager.net
aeg-gs03-prod.trafficmanager.net
aeg-fs22-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
variety-playhouse.com
aeg-wt06-prod.trafficmanager.net
giveaways.apps.aegpresents.com
aeg-ruj4cz7n-prod.trafficmanager.net
aeg-wt18-prod.trafficmanager.net
aeg-vs10-prod.trafficmanager.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
aeg-vs07-prod.trafficmanager.net
aeg-ss15-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-vs07-prod.trafficmanager.net
aeg-fs38-prod.trafficmanager.net
aeg-ss19-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
aeg-ss25-prod.trafficmanager.net
aeg-ms15-prod.trafficmanager.net
aeg-ms38-prod.trafficmanager.net
aeg-ss16-prod.trafficmanager.net
aeg-gs02-prod.trafficmanager.net
aeg-vs02-prod.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
aeg-ss07-prod.trafficmanager.net
aeg-ss09-prod.trafficmanager.net
aeg-wt14-prod.trafficmanager.net
aeg-ss03-prod.trafficmanager.net
aeg-vs06-prod.trafficmanager.net
aeg-ruj4cz7n-prod.trafficmanager.net
aeg-wt07-prod.trafficmanager.net
aeg-ss17-prod.trafficmanager.net
aeg-ms16-prod.trafficmanager.net
aeg-vs26-prod.trafficmanager.net
aeg-xs06-prod.trafficmanager.net
aeg-ss05-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
variety-playhouse.com
aeg-ss07-prod.trafficmanager.net
aeg-do01-dev.trafficmanager.net
aeg-ms23-prod.trafficmanager.net
giveaways.apps.aegpresents.com
aeg-ss12-prod.trafficmanager.net
aeg-ss04-prod.trafficmanager.net
aeg-do03-dev.trafficmanager.net
aeg-fs29-prod.trafficmanager.net
aeg-wt12-prod.trafficmanager.net
aeg-fs19-prod.trafficmanager.net
aeg-bowerypresents-staging.trafficmanager.net
aeg-aegpresents-dev.trafficmanager.net
aeg-vs10-prod.trafficmanager.net
aeg-fs05-prod.trafficmanager.net
aeg-do04-dev.trafficmanager.net
aeg-fs23-prod.trafficmanager.net
aeg-ms22-prod.trafficmanager.net
aeg-vs03-prod.trafficmanager.net
aeg-ss14-prod.trafficmanager.net
aeg-fs05-prod.trafficmanager.net
aeg-fs02-prod.trafficmanager.net
aeg-ss17-prod.trafficmanager.net
aeg-ms24-prod.trafficmanager.net
aeg-vs09-prod.trafficmanager.net
variety-playhouse.com
bowerypresents.com
aeg-fs41-prod.trafficmanager.net
aeg-fs21-prod.trafficmanager.net

Certificate

The complete raw certificate details for aeg-wt11.us-west1.gce.aegp.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILxDCCCqygAwIBAgISA1oqjoOgiRUOBT76CS9bG4DYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTQxNjA4MTVaFw0yNDAyMTIxNjA4MTRaMCsxKTAnBgNVBAMT
IGFlZy13dDExLnVzLXdlc3QxLmdjZS5hZWdwLmNsb3VkMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAyCrBMoAl00/kQoMvTwqJBEuWfvPJw5rtHidcQXEB
N7ALgFCPjlDqtHec6Ye0Hbj3h+CYwh/rEPDJNsTHqMz8n3I3wSdZf4EdvAe+eBGX
jurVa4bJ+Dn/pmNesJAWHRWvzj2rZn6gIbfEiL1nYiVylZ4gN4PYTefRZ4SsjAsZ
8q01i7XIetCimFkbDiuRp1AXzfCDUvv5GvIq5t5JmZvT6Wg48c2M8bll3qhcdeFb
3bNlhMG4s54Ch+VSWwQRVi0FziaEPFfgh/dpqgqEO6LFP3IQFTP+H4iLdMMjuLyo
4nQr45apW/9PGkYobCtkxHsMK/hIF9C7eXfCr2DVHDiGjQIDAQABo4II2TCCCNUw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQkXWN1qU9yENVanmuqge9lZWBieDAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBuEGA1UdEQSCBtgwggbUgiNhZWctd3QxMS51
cy1jZW50cmFsMS5nY2UuYWVncC5jbG91ZIIgYWVnLXd0MTEudXMtd2VzdDEuZ2Nl
LmFlZ3AuY2xvdWSCD2FlZ3ByZXNlbnRzLmNvbYITYWVncHJlc2VudHNsaXZlLmNv
bYIRYWVncHJlc2VudHNsdi5jb22CFGFsZWNiZW5qYW1pbnRvdXIuY29tgg1hdGVl
emxpdmUuY29tghJib3dlcnlwcmVzZW50cy5jb22CEWRheW52ZWdhczIwMTkuY29t
ghFkYXludmVnYXMyMDIxLmNvbYIWZGVudmVyY29uY2VydHRydWNrLmNvbYIXZG9k
b2phY2F0aG90cGlua2RldC5jb22CFWRvamFjYXRob3RwaW5rZGV0LmNvbYIXZHVj
a3NhdWNlYmxvY2twYXJ0eS5jb22CGmVsZWN0cmljZm9yZXN0ZmVzdGl2YWwuY29t
ghRmYWxsZW5lbWJlcnN0b3VyLmNvbYIVZnJhbmtsaW5tdXNpY2hhbGwuY29tghBn
YXBrYXR5cGVycnkuY29tghFnby5nY2UuYWVncC5jbG91ZIISZ29vZGllYmFnaGFi
aXQuY29tghRqb2ludGhlbW92ZW1lbnQubGl2ZYIUa2FuZWJyb3duZmFucGFzcy5j
b22CDWxpdGFmdG91ci5jb22CGG1hZGlzb25ob3VzZXByZXNlbnRzLmNvbYIUbWFy
eW1vb3Jjb25jZXJ0cy5jb22CEG1pa2VlcHBzMjAyMi5jb22CF29oaW52ZXJ0ZWR3
b3JsZHRvdXIuY29tghxwYXJ0bmVyc2hpcHMuYWVncHJlc2VudHMuY29tgh5yZWdl
bmVyYXRlZmVzdGl2YWxjb2xvcmFkby5jb22CHXJpdmVyZGFuY2UuYm93ZXJ5cHJl
c2VudHMuY29tgiVyb2FkcnVubmVyYmlydGhkYXkuYm93ZXJ5cHJlc2VudHMuY29t
gh9zYWxlc2ZvcmNlLmFwcHMuYWVncHJlc2VudHMuY29tghFzZWNyZXRza3lmZXN0
LmNvbYIXc2hvcC5jcnVlbHdvcmxkZmVzdC5jb22CEnN0aWxsd29venl0b3VyLmNv
bYISdGFtZWltcGFsYWxpdmUuY29tgiB0aGVzaW5jbGFpcjEwLmJvd2VyeXByZXNl
bnRzLmNvbYIadGhlc3RhZ2VhdHN1ZmZvbGtkb3ducy5jb22CFHZpcmRhc3dhbnRl
ZHRvdXIuY29tghd3aWxsb2Z0aGVwZW9wbGV0b3VyLmNvbYIXd3d3LmFlZ3ByZXNl
bnRzbGl2ZS5jb22CFXd3dy5hZWdwcmVzZW50c2x2LmNvbYIYd3d3LmFsZWNiZW5q
YW1pbnRvdXIuY29tghF3d3cuYXRlZXpsaXZlLmNvbYIVd3d3LmRheW52ZWdhczIw
MTkuY29tghV3d3cuZGF5bnZlZ2FzMjAyMS5jb22CGnd3dy5kZW52ZXJjb25jZXJ0
dHJ1Y2suY29tght3d3cuZG9kb2phY2F0aG90cGlua2RldC5jb22CGXd3dy5kb2ph
Y2F0aG90cGlua2RldC5jb22CG3d3dy5kdWNrc2F1Y2VibG9ja3BhcnR5LmNvbYIe
d3d3LmVsZWN0cmljZm9yZXN0ZmVzdGl2YWwuY29tghh3d3cuZmFsbGVuZW1iZXJz
dG91ci5jb22CGXd3dy5mcmFua2xpbm11c2ljaGFsbC5jb22CFHd3dy5nYXBrYXR5
cGVycnkuY29tghZ3d3cuZ29vZGllYmFnaGFiaXQuY29tghh3d3cuam9pbnRoZW1v
dmVtZW50LmxpdmWCGHd3dy5rYW5lYnJvd25mYW5wYXNzLmNvbYIRd3d3LmxpdGFm
dG91ci5jb22CHHd3dy5tYWRpc29uaG91c2VwcmVzZW50cy5jb22CGHd3dy5tYXJ5
bW9vcmNvbmNlcnRzLmNvbYIUd3d3Lm1pa2VlcHBzMjAyMi5jb22CG3d3dy5vaGlu
dmVydGVkd29ybGR0b3VyLmNvbYIid3d3LnJlZ2VuZXJhdGVmZXN0aXZhbGNvbG9y
YWRvLmNvbYIhd3d3LnJpdmVyZGFuY2UuYm93ZXJ5cHJlc2VudHMuY29tghV3d3cu
c2VjcmV0c2t5ZmVzdC5jb22CFnd3dy5zdGlsbHdvb3p5dG91ci5jb22CFnd3dy50
YW1laW1wYWxhbGl2ZS5jb22CHnd3dy50aGVzdGFnZWF0c3VmZm9sa2Rvd25zLmNv
bYIYd3d3LnZpcmRhc3dhbnRlZHRvdXIuY29tght3d3cud2lsbG9mdGhlcGVvcGxl
dG91ci5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvOzhrY
AAAEAwBHMEUCICl4f8ljkVdJdJoWytu6ympjTTpVyV+lLvSVUFn1uPEoAiEAjd7B
mYFpkuR8WhiK5mis+hTrJwvzG5KwM5xd5dZ9LfYAdQDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYvOzhsTAAAEAwBGMEQCIHVWlIcYzsyK5pJR682X
/X44yOEVWM+tYkifuas4rQ5DAiAp5OMnn4fG/LRv5GpTsTjZ3OC4wuSDW7+LklMj
+QlDIDANBgkqhkiG9w0BAQsFAAOCAQEACLzt5kdmBTVS2wtkThc843aKJ4ZMtYca
mEbth9IrMFDJJYNC3i6bvw2VaPOAzytCsrowCkxBNIFfz5l/ncsx282FrlPWfJig
JTDaSu73KVJ/IAbgQqy/XfFViKGJ92VVaPnjTRqy/OMi82+mBc/e+0FXjihiZlPG
N1An91hL+FH5PS5+biL8QHFeYT7RmZCOn8W+R95vgr88kR8fu8+orMldGljuZl3M
mQ3mrsSGBTnB+wOrbCl+bLJm2SOa8qRGq3uxWg9D8P+/n1JU0fenWJG7mAX3Q1oH
bvngHNz88pi3Vtv7KVOKpYuA6bzLRfx8gDcZqeqPC4GBzH8+CTTUVQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCrBMoAl00/kQoMvTwqJ
BEuWfvPJw5rtHidcQXEBN7ALgFCPjlDqtHec6Ye0Hbj3h+CYwh/rEPDJNsTHqMz8
n3I3wSdZf4EdvAe+eBGXjurVa4bJ+Dn/pmNesJAWHRWvzj2rZn6gIbfEiL1nYiVy
lZ4gN4PYTefRZ4SsjAsZ8q01i7XIetCimFkbDiuRp1AXzfCDUvv5GvIq5t5JmZvT
6Wg48c2M8bll3qhcdeFb3bNlhMG4s54Ch+VSWwQRVi0FziaEPFfgh/dpqgqEO6LF
P3IQFTP+H4iLdMMjuLyo4nQr45apW/9PGkYobCtkxHsMK/hIF9C7eXfCr2DVHDiG
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292018838369856669044409382567369670099160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 16:08:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 16:08:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25268744110133969525266475680855617359139542015084114088778424289536506815557766285254372861019632687311667533067481047906837629013441758344911542668540172560912616562819921209033202900489560207615608390015208897100083713485660886690560271529159884088752192371462528792869630874987889409746445965273069756811492340485642517055974696548995888491119285000725548526471846860932088918283672824398085020414547850735304842770160133612099503819503185104539478206325215430963768757060588465022183985668475958355501096788351222415134068332279365543118505319743333841411150796810853326130900651559028115498906263472136731002509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							245d6375a94f7210d55a9e6baa81ef6565606278
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerships.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnerbirthday.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cruelworldfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesinclair10.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willofthepeopletour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willofthepeopletour.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcece1ad80000040300473045022029787fc963915749749a16cadbbaca6a634d3a55c95fa52ef4955059f5b8f1280221008ddec199816992e47c5a188ae668acfa14eb270bf31b92b0339c5de5d67d2df6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcece1b13000004030046304402207556948718cecc8ae69251ebcd97fd7e38c8e11558cfad62489fb9ab38ad0e43022029e4e3279f87c6fcb46fe46a53b138d9dce0b8c2e4835bbf8b925323f9094320
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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