bowerypresents.com

Issued by R3

About this certificate

This digital certificate with serial number 03:54:a4:8c:2b:f5:91:42:85:1d:18:83:15:a4:7b:0e:f3:0b was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bowerypresents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:a4:8c:2b:f5:91:42:85:1d:18:83:15:a4:7b:0e:f3:0b
Serial Number (int): 290139297821107960466975628778954713658123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:1b:67:8f:c6:35:cb:b3:e3:e3:f5:51:8f:96:b0:54:ee:9d:3d:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:5e:b3:b2:99:ec:69:d0:67:79:85:34:92:40:d6:c6:4c:69:41:38
Fingerprint (sha256): 98:0d:86:be:26:1a:81:9f:20:0e:37:a2:7e:e0:4f:db:94:05:11:c6:8c:6b:11:64:34:7a:ad:5c:43:d0:7a:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bowerypresents.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bowerypresents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-wt11-prod.trafficmanager.net
aeg-wt11.us-central1.gce.aegp.cloud
aeg-wt11.us-west1.gce.aegp.cloud
aegpresents.com
aegpresentslive.com
aegpresentslv.com
alecbenjamintour.com
ateezlive.com
bowerypresents.com
daynvegas2019.com
daynvegas2021.com
denverconcerttruck.com
dodojacathotpinkdet.com
dojacathotpinkdet.com
ducksauceblockparty.com
electricforestfestival.com
fallenemberstour.com
franklinmusichall.com
gapkatyperry.com
go.gce.aegp.cloud
goodiebaghabit.com
jointhemovement.live
kanebrownfanpass.com
litaftour.com
madisonhousepresents.com
marymoorconcerts.com
mikeepps2022.com
ohinvertedworldtour.com
partnerships.aegpresents.com
regeneratefestivalcolorado.com
riverdance.bowerypresents.com
roadrunnerbirthday.bowerypresents.com
salesforce.apps.aegpresents.com
secretskyfest.com
shop.cruelworldfest.com
stillwoozytour.com
tameimpalalive.com
thesinclair10.bowerypresents.com
thestageatsuffolkdowns.com
virdaswantedtour.com
willofthepeopletour.com
www.aegpresentsevents.co.uk
www.aegpresentslive.com
www.aegpresentslv.com
www.alecbenjamintour.com
www.ateezlive.com
www.daynvegas2019.com
www.daynvegas2021.com
www.denverconcerttruck.com
www.dodojacathotpinkdet.com
www.dojacathotpinkdet.com
www.ducksauceblockparty.com
www.electricforestfestival.com
www.fallenemberstour.com
www.franklinmusichall.com
www.gapkatyperry.com
www.goodiebaghabit.com
www.jointhemovement.live
www.kanebrownfanpass.com
www.litaftour.com
www.madisonhousepresents.com
www.marymoorconcerts.com
www.mikeepps2022.com
www.ohinvertedworldtour.com
www.regeneratefestivalcolorado.com
www.riverdance.bowerypresents.com
www.secretskyfest.com
www.stillwoozytour.com
www.tameimpalalive.com
www.thestageatsuffolkdowns.com
www.virdaswantedtour.com
www.willofthepeopletour.com

Other certificates including the domain name bowerypresents.com

(limited to 100 certificates)
sni8374gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
akamai-san147.exacttarget.com
atlanta.resetconcertseries.com
sa5gl.wpc.edgecastcdn.net
aeg-wt11-prod.trafficmanager.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
sa336gl.wpc.edgecastcdn.net
altjandptm.com
sa367gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
altjandptm.com
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
atlanta.resetconcertseries.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
altjandptm.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa5gl.wpc.edgecastcdn.net
altjandptm.com
altjandptm.com
sa281gl.wpc.edgecastcdn.net
sa336gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
www.bowerypresents.com
akamai-san147.exacttarget.com
houselist.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa336gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
staging.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
altjandptm.com
www.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
altjandptm.com
sa281gl.wpc.edgecastcdn.net
bowerypresents.com
sa376gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
aeg-wt11.us-west1.gce.aegp.cloud
altjandptm.com
sa376gl.wpc.edgecastcdn.net
altjandptm.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
houselist.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
entry.bowerypresents.com
aeg-wt11-prod.trafficmanager.net
sa376gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
www.prod.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
sa376gl.wpc.edgecastcdn.net
media.bowerypresents.com
sa336gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
sa376gl.wpc.edgecastcdn.net
bowerypresents.com
covidwaiver.aegpresents.com
stg-media.bowerypresents.com
riverdance.bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa367gl.wpc.edgecastcdn.net
www.bowerypresents.com
sa376gl.wpc.edgecastcdn.net
www.staging.bowerypresents.com
riverdance.bowerypresents.com
sa281gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
akamai-san147.exacttarget.com
sa336gl.wpc.edgecastcdn.net
sa281gl.wpc.edgecastcdn.net
sa336gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for bowerypresents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290139297821107960466975628778954713658123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 19:13:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 19:13:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bowerypresents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845250501192056312877460941325276180349503917801380856629546429782095209490976493740461515098218287280889210103454422815920857320198809974939876682479672469587295813867637869358276934015589695009862577092876493654176581680225006594218951979053509754596929274003064387502293655221720633976990173809070413113321244183999850133014810111249192454585552589428571884234775190594584919234809324016136598387079013289565494204739868858919177417907158794179884520305020488434241968077621774748691894141127282744157621666330835282107235055029847274800538731784842072904245031096063747658153668074260023327831984011427172988143275713730784908568191726656484468028886965279801762679007144663744832192981391586796645289796604775709552524623833590372982151655195866815866560079712497453944171125430045874385998709599032489872434967602309193225872847027066349716166385189414687840892487952272027875667113265074886665548982810128675033127846480705768090095046448133023913912179243264525887275912599226826535386310638721280271552851025794689056807381283123243527974131016922502318077184251553146273057350984246807431639680058502374279414320239065406889437788428909066387794975830434658916104574137947169037187918375690369100512696711077053030617407363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f1b678fc635cbb3e3e3f5518f96b054ee9d3d3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-wt11.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerships.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadrunnerbirthday.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.apps.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cruelworldfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesinclair10.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willofthepeopletour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentsevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aegpresentslv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alecbenjamintour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ateezlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynvegas2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denverconcerttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dodojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dojacathotpinkdet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducksauceblockparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electricforestfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fallenemberstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklinmusichall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gapkatyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodiebaghabit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhemovement.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanebrownfanpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litaftour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marymoorconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeepps2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohinvertedworldtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regeneratefestivalcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverdance.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretskyfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stillwoozytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tameimpalalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thestageatsuffolkdowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virdaswantedtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willofthepeopletour.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001889ca4eb4f0000040300463044022019268cc207e1dc300037a5f9675edde785cecdef9863c077056eaa776ba6a158022051188ed69f6d1ac37d54856daee66858484b29f2d5d5fc44c8c42b0101b5922f007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001889ca4eb3a0000040300483046022100ca6978690a9e7676562aa8f8a1b197f040edb5416bbba01742f5d2ddbd162dc5022100f42e77a5eac54e85e75348e42ea94b1cabad410c1ba9fa428247de5eae4e6460
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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