covidwaiver.aegpresents.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e1:0f:04:1f:c4:53:8d:1d:28:a6:a7:e2:22:ff:49:c4:db was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=covidwaiver.aegpresents.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:0f:04:1f:c4:53:8d:1d:28:a6:a7:e2:22:ff:49:c4:db
Serial Number (int): 337920350185925377514586893603491990324443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:c9:03:9b:d4:70:08:f8:1d:cb:fd:75:29:48:73:0f:7f:0b:ab:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:ae:05:91:00:5b:9f:52:e3:c5:db:22:88:2e:78:2d:18:4f:2b:5f
Fingerprint (sha256): 99:af:cd:ae:35:e8:64:06:44:74:d8:cf:c2:f2:fd:0c:10:fb:72:d0:5a:9a:b3:43:3a:d3:bf:8d:02:c7:5c:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate covidwaiver.aegpresents.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covidwaiver.aegpresents.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-xs10-prod.trafficmanager.net
covid19waiver.aegpresents.com
covidwaiver.aegpresents.com
covidwaiver.bowerypresents.com
covidwaiver.goldenvoice.com
employee-covidwaiver.aegpresents.com

Other certificates including the domain name aegpresents.com

(limited to 100 certificates)
khalid.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
admin.greenyservices.com
aeg-ms20-prod.trafficmanager.net
cert00034-azurecdn.akamaized.net
aeg-ms20-prod.trafficmanager.net
mng-stg.michinoeki-saigai.jp
cert00034-azurecdn.akamaized.net
sa490gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
www.crmbits.com.br
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
roadie.apps.aegpresents.com
aeg-xs06-prod.trafficmanager.net
akamai-san147.exacttarget.com
shawn.asia.aegpresents.com
aeg-xs02-prod.trafficmanager.net
www.crmbits.com.br
elvis-api-prd-lb.apps.aegpresents.com
sa490gl.wpc.edgecastcdn.net
atlanta.resetconcertseries.com
lauv.asia.aegpresents.com
sa514gl.wpc.edgecastcdn.net
aeg-ms20-prod.trafficmanager.net
www.janithsamee.me
sniad2bgl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
aeg-wt11-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
cert00034-azurecdn.akamaized.net
sa514gl.wpc.edgecastcdn.net
southatlantic.aegpresents.com
aeg-ms19-prod.trafficmanager.net
sa490gl.wpc.edgecastcdn.net
martbhiadmin.estore.business
aeg-xs02-prod.trafficmanager.net
cms.media.aegpresents.com
sniad2bgl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa514gl.wpc.edgecastcdn.net
bowerypresents.com
aeg-wt11.us-west1.gce.aegp.cloud
elvisqa.aegpresents.com
app.keeperhr.com
altjandptm.com
roadie.apps.aegpresents.com
roadie-staging.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
partnerships.aegpresents.com
atlanta.resetconcertseries.com
sa490gl.wpc.edgecastcdn.net
b.aegpresents.com
vendors.stagecoachfestival.com
nashville.aegpresents.com
cert00034-azurecdn.akamaized.net
cert00034-azurecdn.akamaized.net
amex.aegpresents.com
altjandptm.com
farewellyellowbrickroad.aegpresents.com
elvisqa.aegpresents.com
aeg-ms19-prod.trafficmanager.net
roadie.apps.aegpresents.com
drumssiddharth.com
sa514gl.wpc.edgecastcdn.net
click.events.aegpresents.com
elvis-api-prd-lb.apps.aegpresents.com
sa514gl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
aeg-xs06-prod.trafficmanager.net
altjandptm.com
snib67cgl.wpc.edgecastcdn.net
sa490gl.wpc.edgecastcdn.net
giveaways.apps.aegpresents.com
aeg-xs02-prod.trafficmanager.net
nashville.aegpresents.com
shawn.asia.aegpresents.com
akamai-san147.exacttarget.com
roadie.apps.aegpresents.com
cms.media.aegpresents.com
shawn.asia.aegpresents.com
mi.aegpresents.com
sa490gl.wpc.edgecastcdn.net
staging.aegpresents.com
shawn.asia.aegpresents.com
aeg-ms20-prod.trafficmanager.net
sa514gl.wpc.edgecastcdn.net
vendors.stagecoachfestival.com
staging.aegpresents.com
sa514gl.wpc.edgecastcdn.net
altjandptm.com
www.bacod.xyz
sa490gl.wpc.edgecastcdn.net
farewellyellowbrickroad.aegpresents.com
sa490gl.wpc.edgecastcdn.net
roadie-staging.apps.aegpresents.com
partnerships.aegpresents.com

Certificate

The complete raw certificate details for covidwaiver.aegpresents.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337920350185925377514586893603491990324443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 08:05:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 08:05:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covidwaiver.aegpresents.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673672647784824083150405281848376175834101837443656480928860389802894836981562510394743129995993425585036544237588672442630409545172541761846364955638258129020478138244474870370998670880412102135970160359820584468186901139623471839079884726038624926811445113891738391569721279194627329200057618307958254803459796035069345954318809542244696035854441286531695638090941389685686735217254792507747839994325055015247209400714113568831343477944902803246354491884256971598966126872066006932608195455155039934316588982654829691511640043391987917568021572476822731352357970803493464049157355587539867644124285698179653021009007218766053097507663423668926540284050589300287343870782382687829145174548793099535571340896051074655035720657736293317947106779268356261123660321659574142539525330975673686847227676996348883585233850784067638640796913532130045176763551191996022556395082958194225369564356004602229690563091957439979360052340789353409736246288825948836174136388006548958569072047383154835693526025751533138506473879392866884437881359279384369890335620311967881085333681171308602583955869132746350330122294312782138111713916889807134514749306704565160044784121697320790600951318472677809307341036965190841674370188997473152765408524843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05c9039bd47008f81dcbfd752948730f7f0bab84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs10-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19waiver.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidwaiver.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidwaiver.bowerypresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covidwaiver.goldenvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employee-covidwaiver.aegpresents.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd761067c0000040300483046022100e084c6789f23457bce2506505518e9b0b82e4fa35cccb8a82acf7cae78deffb702210097458637b5092968de50ae8b78705937236ccafec4ab02f8c95a3d633082c4250077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd761067200000403004830460221009d75ce1654bd938d5f9e7b5a953046ef99d6f29a4b583b818509a97eb1eedfb7022100b53e106d3daf93587386b1c92a4dc1e5a671784ff988c65551d01b26649ec917
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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