aeg-wt18-prod.trafficmanager.net

Issued by R3

About this certificate

This digital certificate with serial number 03:35:f8:c3:9a:86:d8:d9:05:0c:a0:0d:8d:9d:a0:a3:93:bd was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-wt18-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:f8:c3:9a:86:d8:d9:05:0c:a0:0d:8d:9d:a0:a3:93:bd
Serial Number (int): 279702487417107315793435920107164127171517
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:a8:04:a8:45:14:b8:49:c9:8e:7f:40:46:02:3f:1b:08:20:3c:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:79:aa:d8:35:f5:80:73:69:c8:8b:3d:6e:8e:b8:45:3b:95:b1:71
Fingerprint (sha256): 72:d8:9a:bb:45:d5:20:a1:57:98:c1:1a:a7:ff:24:bc:3e:e4:8b:ea:bf:39:f9:29:1f:b6:8d:9f:55:bb:d6:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-wt18-prod.trafficmanager.net

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-wt18-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt18-prod.trafficmanager.net
aeg-wt18.us-central1.gce.aegp.cloud
aeg-wt18.us-west1.gce.aegp.cloud
aegliveevents.com
altjandptm.com
bobmosesla.com
btsexhibitionus.com
davidblaineinvegas.com
freewaterblockparty.com
goldensummersandiego.com
goldenvoicecybermonday.com
goldenvoicevalentines.com
herefornowtour.com
jojinectartour.com
lane8la.com
magicalthinkingtour.com
marcrebillettour.com
moonmanslanding.com
natenyc.com
neckdeepdistortionstour.com
oncetwicemelodytour.com
the1975dxb.com
thethrivetour.com
www.aegliveevents.com
www.altjandptm.com
www.bobmosesla.com
www.btsexhibitionus.com
www.davidblaineinvegas.com
www.freewaterblockparty.com
www.goldensummersandiego.com
www.goldenvoicecybermonday.com
www.goldenvoicevalentines.com
www.herefornowtour.com
www.jojinectartour.com
www.lane8la.com
www.magicalthinkingtour.com
www.marcrebillettour.com
www.moonmanslanding.com
www.natenyc.com
www.neckdeepdistortionstour.com
www.oncetwicemelodytour.com
www.the1975dxb.com
www.thethrivetour.com
www.zeromilepresentsgetlucky.com
zeromilepresentsgetlucky.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
dev.eastus2.paperboy.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
ML1PrdApp07.prod.idns.azure.net
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
southeastasia.prod.api.medeina.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
CBN09PrdApp01.prod.idns.azure.net
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
ptm-pqs-0.cbr.p.prometheusmetrics.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
tm-cxpes-prod-hipri.trafficmanager.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
BY5PrdApp03.prod.idns.azure.net
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
ic3he-ge-prod.teams.microsoft.com
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
tm-cxpes-prod-oslocom.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com

Certificate

The complete raw certificate details for aeg-wt18-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279702487417107315793435920107164127171517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 15:01:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 15:01:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-wt18-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699934485331393392708898687784180174530308439386590966695062563610073279971690530503514622101242345873041435654882034896347970782531746824658887219053789614185197885736574733121379458134604599257309558935982165122061689911254984061898803861611396871944106178455546398727570624089117411759053087808575019393450613453257930953812176300695976670257174931968585859738580973309595002564887210926227851143356133349665218605975735837169140604514005143752605452540270951973882500350721551855232060389388732903878018557070314441994580030177039082226431887607698774539353921832180825079047156128766723797158292216627090064095904068609336251506120596154361735928524074509826569220888978891514960177856617321573902474639116198997222405846293164303369654167575439562920808128259966739729532811908760341440745920262507116474327183367645956909500607023314385272616273237060843410768068218355648591127898064926568268093968837814237093340247223523129590588637324014470488962167956948508706780382655133097740981555563330206884591180497876232024927596789314862041137888389521251900692797291205198465671143019024257430192070163112315540695294777615968493174383689919664581900671680172756261133279504081082228798982266279168653759492506848755714968634891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0a804a84514b849c98e7f4046023f1b08203ced
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt18.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegliveevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altjandptm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobmosesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btsexhibitionus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidblaineinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freewaterblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldensummersandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvoicecybermonday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenvoicevalentines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herefornowtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojinectartour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lane8la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicalthinkingtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcrebillettour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonmanslanding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckdeepdistortionstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncetwicemelodytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the1975dxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thethrivetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegliveevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altjandptm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobmosesla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btsexhibitionus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidblaineinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freewaterblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldensummersandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvoicecybermonday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenvoicevalentines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herefornowtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jojinectartour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lane8la.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicalthinkingtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcrebillettour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonmanslanding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neckdeepdistortionstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oncetwicemelodytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the1975dxb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thethrivetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeromilepresentsgetlucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeromilepresentsgetlucky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894089b86100000403004830460221008bc636c26c60f40582ab8400efd86d89dc104d9fbe4ddf8e017a2b480571908e022100c78d48397d7667eecf5e3c5afd0e2eefd64393f1d178b4d34a2afcb426071433007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001894089b8940000040300483046022100cc0f4c266763892b52bbe7b6cbb30feb16c575eab3ec0776e002e8ccb4fa5874022100f86d96ee564f55cd72e9a54a83813966ae74f731c92ca0638396d34626ea7d58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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