aeg-wt11-prod.trafficmanager.net

Issued by R3

About this certificate

This digital certificate with serial number 04:d2:ca:fb:77:b4:24:e1:0c:dd:4a:40:52:fd:35:eb:7d:b6 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-wt11-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:ca:fb:77:b4:24:e1:0c:dd:4a:40:52:fd:35:eb:7d:b6
Serial Number (int): 420178250529977334778395417284486806338998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:1c:c7:5f:77:ec:da:28:0c:36:4c:3c:a5:50:3b:33:c1:72:73:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:ec:8f:03:0f:50:b2:79:e0:86:e0:d5:83:32:80:fd:3c:7a:ed:1c
Fingerprint (sha256): 7c:06:4f:a3:6c:12:fb:0d:2f:e9:11:db:b5:99:4e:f2:db:82:c8:6c:7c:3e:7c:67:9e:46:ef:f7:a9:9c:69:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-wt11-prod.trafficmanager.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-wt11-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt11-prod.trafficmanager.net
aeg-wt11.us-central1.gce.aegp.cloud
aeg-wt11.us-west1.gce.aegp.cloud
aegpresents.com
aegpresentslv.com
alecbenjamintour.com
ateezlive.com
bowerypresents.com
daynvegas2019.com
daynvegas2021.com
denverconcerttruck.com
dodojacathotpinkdet.com
dojacathotpinkdet.com
ducksauceblockparty.com
electricforestfestival.com
fallenemberstour.com
franklinmusichall.com
gapkatyperry.com
go.gce.aegp.cloud
goodiebaghabit.com
kanebrownfanpass.com
litaftour.com
madisonhousepresents.com
marymoorconcerts.com
mikeepps2022.com
ohinvertedworldtour.com
regeneratefestivalcolorado.com
riverdance.bowerypresents.com
roadrunnerbirthday.bowerypresents.com
salesforce.apps.aegpresents.com
secretskyfest.com
stillwoozytour.com
tameimpalalive.com
thesinclair10.bowerypresents.com
thestageatsuffolkdowns.com
virdaswantedtour.com
www.aegpresentslv.com
www.alecbenjamintour.com
www.ateezlive.com
www.daynvegas2019.com
www.daynvegas2021.com
www.denverconcerttruck.com
www.dodojacathotpinkdet.com
www.dojacathotpinkdet.com
www.ducksauceblockparty.com
www.electricforestfestival.com
www.fallenemberstour.com
www.franklinmusichall.com
www.gapkatyperry.com
www.goodiebaghabit.com
www.kanebrownfanpass.com
www.litaftour.com
www.madisonhousepresents.com
www.marymoorconcerts.com
www.mikeepps2022.com
www.ohinvertedworldtour.com
www.regeneratefestivalcolorado.com
www.riverdance.bowerypresents.com
www.secretskyfest.com
www.stillwoozytour.com
www.tameimpalalive.com
www.thestageatsuffolkdowns.com
www.virdaswantedtour.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
francecentral.prod.api.medeina.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com

Certificate

The complete raw certificate details for aeg-wt11-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420178250529977334778395417284486806338998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 19:35:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 19:35:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-wt11-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749777249406742711703572334171182782620567762306282766829277012412091159340209978023714555519325749192918731272005042053103132253623724992358785244060090718707912023541496555012255268300280544311887894520644446557928435395020445537587589586045269523205878424879763788158423734899032052425953952951600422434819476509027775403187373344910517956600956443422584360259526005690813994626840223623219752732883249033550398880242505879703593521408707176309078530694247930001082762136539289077923227614475569131428097673993973111196166313004844260301714552309083462299381515323061038058535165795038220976787386654851437144862117228879147778912149461080400042072348423350303105470918008117664438137948371198668882062922604306088315759164497982211098855877447080114275417259386250659016058742461143575178082522505607658521739342530037412894930634100896887221189835527662740308761827651023875801627185598098160374878276378838258524153384260124835767243489695941590330457329178660638496455916393765061717905971870356158329577523181526011079780415244296212735714005514578492484250295915654827195408152913415178758938945028765520875075893916102323112982008019325967686314373227353988695912743444849828668826634696583585358231105291697670811443040101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							221cc75f77ecda280c364c3ca5503b33c17273e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1583 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnerbirthday.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesinclair10.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virdaswantedtour.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187772e8587000004030047304502210082acd74161e44f8df817fc48d1c4892282b52fa06418070f1a6866276c69ff7b022042410e57bf12af9e48c28b9742ffc4f86b6bd46fa8067e925164c95eb90cb49a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187772e857d0000040300473045022100a0d88b86129b32aff8951f84e6ef4fe4773bdf9da1b01d66f9bec48c283de6680220677fb895dc40aa0a8fc28b7f154ab34a59cd25947beca851d80a244f9d087a0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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