aeg-ms20-prod.trafficmanager.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:35:a0:e6:f3:fe:94:a0:dc:9d:1e:dd:53:dc:aa:0b:6e:ab was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-ms20-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:a0:e6:f3:fe:94:a0:dc:9d:1e:dd:53:dc:aa:0b:6e:ab
Serial Number (int): 366697984830249259917456364603488934260395
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:1f:f7:a6:22:c5:f9:0c:55:21:bf:9b:67:6a:9c:cc:b5:73:6d:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:04:c0:2a:b4:bf:1e:32:5a:a1:3e:c6:d4:7a:01:aa:26:9e:12:38
Fingerprint (sha256): 6d:16:09:67:92:db:0f:6c:74:f3:f6:66:a8:0f:40:01:95:a0:85:50:5a:df:04:dd:e0:58:5f:22:27:67:71:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aeg-ms20-prod.trafficmanager.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-ms20-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-ms20-prod.trafficmanager.net
martinlawrence.aegpresents.com
newsletter.aegpresents.com
newsletter.goldenvoice.com
newsletter.madisonhousepresents.com
newsletter.wintercircleproductions.com
nickcannonwildnoutlive.com
optin106.aegpresents.com
vendors.stagecoachfestival.com
websterhall.preferences.aegpresents.com
www.desusandmerodonyc.com
www.nickcannonwildnoutlive.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
francecentral.prod.api.medeina.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com

Certificate

The complete raw certificate details for aeg-ms20-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH3TCCBsWgAwIBAgISBDWg5vP+lKDcnR7dU9yqC26rMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMyMTExMDNaFw0y
MDA1MDMyMTExMDNaMCsxKTAnBgNVBAMTIGFlZy1tczIwLXByb2QudHJhZmZpY21h
bmFnZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzeAtFhRX
+FF6/HamEWneCU7DTRyAKtKaxrefPS+5QKwd0zxmwdeauiFfB7z0FHdgmEKp9de7
FIgR6rao6Z3hPkaWrG6aWBFSpZ4A4dnOVhIw6HmqXO4IQvxhxQf65rfjcB0sv+dw
n0eHAo/9CAn9e4hdP2hEa7M9jyHUurvaAvVmQhwU4BNDY4PqunkQV2LIHMZI0tQs
VwcMWQwn6af/9gQ/4L9YSXl9xZA29M4NdDqg0m+OGs8NSsP9fQi42hr8DvBdCHUo
S8btKzVlaTWLYLJZAIvCcmG2StQyK+CJGUF8G/Vpth7Z+W7Q+NwIh0romAvumPCW
qeddiMX7AnTQNeKhm005+cRdFt9zzDpWar002nXsKi/wkRI6fq7Ln86HuQ4CC7kd
Cb4o1DwodYepbrwmRbLF82KovIDG6qkU/UydqgGaYaOkOvLiknv8WYQb7zz6ILkt
WnsNYZl75znDgIgiMJB/JuvB5prbRvFR+pDOdngNyVXPReFDZ7N4eIuFghGtSS6y
ZltMHxAorNpMjc/7Na1Ia3HgfGbWgoFo7iBkG8myKP/lpDKytoKsIElprK3S3R8j
LelP56a0BxY9vpdlxDEOuOSzVwikxR/TF9jzYJbBOJYX5KAca4+agbmv2il19hWu
KNed3WGgOEGf1kBsA0kXzl+ZlVHuKSsE5B0CAwEAAaOCA9owggPWMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUGB/3piLF+QxVIb+bZ2qczLVzbVQwHwYDVR0jBBgwFoAU
qEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzAB
hiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAC
hiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCAY4GA1UdEQSC
AYUwggGBgiBhZWctbXMyMC1wcm9kLnRyYWZmaWNtYW5hZ2VyLm5ldIIebWFydGlu
bGF3cmVuY2UuYWVncHJlc2VudHMuY29tghpuZXdzbGV0dGVyLmFlZ3ByZXNlbnRz
LmNvbYIabmV3c2xldHRlci5nb2xkZW52b2ljZS5jb22CI25ld3NsZXR0ZXIubWFk
aXNvbmhvdXNlcHJlc2VudHMuY29tgiZuZXdzbGV0dGVyLndpbnRlcmNpcmNsZXBy
b2R1Y3Rpb25zLmNvbYIabmlja2Nhbm5vbndpbGRub3V0bGl2ZS5jb22CGG9wdGlu
MTA2LmFlZ3ByZXNlbnRzLmNvbYIedmVuZG9ycy5zdGFnZWNvYWNoZmVzdGl2YWwu
Y29tgid3ZWJzdGVyaGFsbC5wcmVmZXJlbmNlcy5hZWdwcmVzZW50cy5jb22CGXd3
dy5kZXN1c2FuZG1lcm9kb255Yy5jb22CHnd3dy5uaWNrY2Fubm9ud2lsZG5vdXRs
aXZlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVY
AAABcA0bYhMAAAQDAEYwRAIgN5oUbSdH5hexoWb7VArdfrJx159JOadmXXzxYFpv
IhECIE/BnRNS/gL1fhQvkbxEzReI3oI9aAFl0XnCbmLHL1SpAHcAB7dcG+V9aP/x
sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwDRtiNwAABAMASDBGAiEA3gMju+4w
G0hZznANc5BoNLmd/9uIt0CqS2C5l7aWU5YCIQCVwmo2cE11SIdAjsjoCzKvmwoE
T5NUr1F2jptFcs0UEjANBgkqhkiG9w0BAQsFAAOCAQEARWKFw3lJ2y/tBZ4F1oeN
/fqlOZoLTxiuZq+0ZuNXYsM0VWHawK9mP1YjUPGDkhHaABIIgIm1mFBTicUIuaww
OXQqFsSfRHzzE9uMFaTz9UWfdiTZ4jpryfajTfSdemJyJqT5g4f2UEarTdiIpc4B
G3O7m7/EueLzJN3/m+XsLJQlYMHHQdXebUSShzr30+j57Pn+7+8w7eg4R1YznxIz
gkBTc8i/WQAPMZjC0aZ7EEdjvqD/p0/gcjGilRj28bv1CVfcfg9+4cua8B3mByGj
W1Em4Eid3MwgI677mMwoL4Dg9wQkRGwxTzF9+lz23nXPdjwkwteoDIMOmBZhmLlq
pQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366697984830249259917456364603488934260395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 21:11:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 21:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-ms20-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839899529141886330683522811677839263175055026701704387951155383872509114372545341455326236848871193958816068496176183639319446200640666152155847115445988069927567078070963735326664138154234565163238734314549501306523174136498412506618320067003089924771109079563188779853777513846938986775076033307089099610712256417573450510808156395584208280459117280085785044516106187687194704427095340965001876829842608515881770575353642868968665736300888510709832607387270162845779948910278545598262448060244699838957441786940127685382073039533625845641619587233595327153898479640102334656941418270931303675633448147640121693769551585875382022812894470209789957926501604806189871459178531472036192625750651840741880223386448084337437481848709440779260394611280720415821329286229082237905812567720875974608054346456300153305625097093341943127093115914025232074126277930606521405270031410204167856770626970578439442995499134288070961817452274286111269853050755455326739836777229645800248101547717279940281122443417609407768054581031418107826519884417252815622396840721070639315768064104113152119221924911057817666278280000811216295373837508793220035769136394055899363395709964456303487293713285795937076135489704701093699064027296211631662399022109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							181ff7a622c5f90c5521bf9b676a9cccb5736d54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-ms20-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinlawrence.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.goldenvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.wintercircleproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin106.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendors.stagecoachfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websterhall.preferences.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desusandmerodonyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700d1b621300000403004630440220379a146d2747e617b1a166fb540add7eb271d79f4939a7665d7cf1605a6f221102204fc19d1352fe02f57e142f91bc44cd1788de823d680165d179c26e62c72f54a900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700d1b62370000040300483046022100de0323bbee301b4859ce700d73906834b99dffdb88b740aa4b60b997b696539602210095c26a36704d754887408ec8e80b32af9b0a044f9354af51768e9b4572cd1412
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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