jenkins-lx-dev.rspn.ad.ea.com

- Electronic Arts Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:4a:67:82:46:d1:6c:5d:4f:30:70:2d:aa:16:fc:95 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Electronic Arts Inc.

Organization: Electronic Arts Inc.
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:4a:67:82:46:d1:6c:5d:4f:30:70:2d:aa:16:fc:95
Serial Number (int): 16337065326717998616401640333549960341
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6a:1a:ad:b7:86:7a:d6:8a:20:b4:29:a6:b2:2e:bc:66:e4:a7:10:d0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 31:59:00:c5:44:86:ba:fe:40:52:92:53:c4:f3:96:5f:1b:49:a1:7f
Fingerprint (sha256): 01:0e:ab:1a:d1:32:a6:42:6c:a4:61:90:c5:27:83:95:ed:f7:19:19:5d:e1:38:54:c6:d2:16:71:32:3d:69:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate jenkins-lx-dev.rspn.ad.ea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jenkins-lx-dev.rspn.ad.ea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jenkins-lx-dev.rspn.ad.ea.com

Other certificates including the domain name ea.com

(limited to 100 certificates)
stage.stargate.ea.com
ava.ea.com
secure07.stage.lithium.com
ups-dev.darkside.ea.com
firebaseapp.com
social.integration.cimessage.ea.com
testrail02-dev.rws.ad.ea.com
firebaseapp.com
content-test2.ts4.eu.ea.com
studio.japan.ea.com
firebaseapp.com
istoreprod2.ea.com
uat.alert-manager.ea.com
aat.fifa-wwe.ea.com
fs.s1.press1.fwm.ea.com
eac-fisheye.eac.ad.ea.com
o.ssl.fastly.net
firebaseapp.com
o.ssl.fastly.net
lt-sov.ceit.ea.com
sha1.admin.eadp.catalog.ea.com
proxyclick.ea.com
erpebsdev.ea.com
ca1-edge.ea.com
sbo-stage.ea.com
ccs.integration.gameservices.ea.com
www.ea.com
eac-scoop-ufcfb-stage.eac.ad.ea.com
signin.ea.com
syseng-prd-chef01.bio-dub.ea.com
extapps.ea.com
pas.gos.ea.com
www.origin.com
firebaseapp.com
accounts2s.internal.ea.com
www.henrymoulton.com
clouddw.ccm.ea.com
ts3.id1.nucleus.ea.com
services.ea.com
firebaseapp.com
secure06.lithium.com
swtor.staging.checkout.ea.com
argocd-dev.darkside.ea.com
int.apis.controltower.ea.com
swarm-whiteshark.dice.ad.ea.com
pas.external.easfc.ea.com
xds-connectts.ea.com
walams.tools.lt.gos.ea.com
accounts.lt.ea.com
utas.stage.s1.ea.com
*.online.ea.com
tos2.integration.ea.com
utas.external.s2.fut.ea.com
balrog-horde-broker-dev1.ea.com
jenkins-lx-dev.rspn.ad.ea.com
utas.gt.mobile.fut.ea.com
mkacct.id1.nucleus.integration.ea.com
shadowsofthedamned.ea.com
stargate.ea.com
fecs.ea.com
*.int.marketplace.ea.com
prometheus-node-exporter.prod.shield.madden.sdo.ddns.ea.com
gateway.int.ea.com
rest-test1.ts4.eu.ea.com
press.ea.com
signin.ea.com
usa-gate-test.wolf.ea.com
*.apex.prod.marketplace.ea.com
fb-docker-registry.dice.ad.ea.com
*.ea.com
utas.fos5.fut.ea.com
login.ea.com
telegraf.ccm.ea.com
o.ea.com
eav1045519.eac.ad.ea.com
client.sovprimeaws.itcloud.ea.com
gosredirector.qa.ea.com
mpki-test.ea.com
firebaseapp.com
firebaseapp.com
Pexipconfvmspool.video.ea.com
firebaseapp.com
firebaseapp.com
easo.novafusion.integration.ea.com
ava.ea.com
*.dice.ad.ea.com
yoda.ea.com
utas.eacert3.fut.ea.com
nucleus-pulse.ea.com
leapfrog-ssl-10.gcs-web.com
pctrial.burnoutweb.ea.com
proxy.novafusion.ea.com
fs.s2.lt.fwm.ea.com
techops0030.eqx-ams.ea.com
*.stage.us-east-1.marketplace.ea.com
friends.gs.ea.com
grafana.gs.ea.com
statics.checkout.staging.ea.com
firebaseapp.com
events.ea.com

Certificate

The complete raw certificate details for jenkins-lx-dev.rspn.ad.ea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EYXAkx1qjFq8CG6X9Jp
MmtFnajMMUywpfX04nYpIj/Pd7gurxLW93LMETrgd473ztyhyDQl1T6AIkOOw1Z2
O5IWSHnvzshBvRgUB+TEPYNJag7ysQe0jChZlnwzo8123W/XobSM2t0hTpFwskbw
pptX35S97/GujQ+05qp3++OspOplulZI1QZwPplKGpdcbpAGl93BqBq0eJKzG1PM
YGeUgnYBxkEHJgvs22beFPB126iY16CAwNZh1gXEX1ZvwBLkaSODK5iPaUDVXgWx
7AFAReoH+foa/wzdj2f2KOkv1/qrRo+Qd21k06AGV4Yu5RcsZ94CiBe1FCINx/KZ
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16337065326717998616401640333549960341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jenkins-lx-dev.rspn.ad.ea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29321849359540191155986700259691224514474139481322676540761199670175490904759818590276042582908349279832068314580179180034443997767063546644601356519125891245865420549487974386495176621778326993190608007980533843444227345986123098742502704448128374764997476985599076004467910136197675469982216434496239294154865752313913510175827523286193205303038150125582764745717097222440916169086094444864102299552670214403887646990476132109538299699197197460984147226108528149969212264624353695611256197295915467751371749744672077855719351169833180485013406651959121390734874483230055613537942790950584429730164835052745271712033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a1aadb7867ad68a20b429a6b22ebc66e4a710d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins-lx-dev.rspn.ad.ea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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