m.avatar.dm.origin.com

- Electronic Arts Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:8e:a3:4f:67:91:84:9b:6c:b4:e1:37:78:0b:9e:12 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Electronic Arts Inc.

Organization: Electronic Arts Inc.
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:8e:a3:4f:67:91:84:9b:6c:b4:e1:37:78:0b:9e:12
Serial Number (int): 14032898435604214576348041180875562514
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 65:94:87:65:ea:81:8d:04:52:2d:4d:de:6b:fa:4e:67:20:c2:45:25
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 04:42:80:0d:2e:d5:2e:b3:f1:ff:79:20:31:eb:16:18:53:2b:01:16
Fingerprint (sha256): 01:93:9e:a8:3a:15:88:d6:89:c5:e3:df:a5:23:30:77:c0:66:a4:3d:d0:47:83:e1:d8:78:85:03:00:bb:79:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate m.avatar.dm.origin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.avatar.dm.origin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.avatar.dm.origin.com

Other certificates including the domain name origin.com

(limited to 100 certificates)
preprod.chef.x.origin.com
originslashstore.cms.origin.com
fc.qa.dirtybits.dm.origin.com
integration.m.friends.dm.origin.com
lt.oms.origin.com
www.origin.com
voiceregister.dm.origin.com
integration.dirtybits.api.origin.com
storesource.cms.origin.com
dev.dirtybits.dm.origin.com
ecommerce2.dm.origin.com
m.avatar.dm.origin.com
atom.dm.origin.com
fc.qa.avatar.dm.origin.com
stable.api.oms.origin.com
fc.qa.ecommerce.dm.origin.com
dcmt-origin-auth.dm.origin.com
preorder.origin.com
chat.dm.origin.com
fc.qa.er.dm.origin.com
x.voiceregister.dm.origin.com
eradmin.dm.origin.com
friends.dm.origin.com
er.dm.origin.com
preview.assets.cms.origin.com
fc.qa.avatar.dm.origin.com
qa-main.chat.dm.origin.com
*.free.origin.com
dev.xray.x.origin.com
avatar.dm.origin.com
assets.dm.origin.com
integration.m.friends.dm.origin.com
integration.sims4m.avatar.dm.origin.com
sb1.www.x.origin.com
fc.qa.preview.cms.origin.com
www.origin.com
config.x.origin.com
stage.ecommerce2.dm.origin.com
search.dm.origin.com
*.origin.com
*.origin.com
fc.qa.review.cms.origin.com
checkout.alpha.origin.com
m.friends.dm.origin.com
www.origin.com
preorder.origin.com
*.staging.checkout.ea.com
www.origin.com
*.social.ea.com
loginregistration.dm.origin.com
fc.qa.er.dm.origin.com
avatar.dm.origin.com
account.preprod.origin.com
www.origin.com
promomanager.dm.origin.com
qa.dirtybits.api.origin.com
integration.eradmin.dm.origin.com
originslashstore.cms.origin.com
upgrade.dm.origin.com
integration.avatar.dm.origin.com
fc.qa.approve.assets.cms.origin.com
support.ea.com
upgrade.dm.origin.com
integration.bioware.web.dm.origin.com
integrationx.voiceregister.dm.origin.com
xray.x.origin.com
integration.m.avatar.dm.origin.com
er.dm.origin.com
lvlt.store.thesims3.com
qa.review.cms.x.origin.com
integration.atom.dm.origin.com
qa.x.origin.com
integration.web.dm.origin.com
bioware.web.dm.origin.com
cloudsync.dm.origin.com
m.help.ea.com
www.origin.com
www.dm.origin.com
fc.qa.www.assets.cms.origin.com
*.free.origin.com
fc.qa.avatar.dm.origin.com
fc.qa.dirtybits.dm.origin.com
friends.gs.ea.com
prod.chef.x.origin.com
www.origin.com
integration.cloudsync.dm.origin.com
checkout.preprod.origin.com
eradmin.dm.origin.com
*.free.origin.com
account.origin.com
sandbox.account.origin.com
www.origin.com
qa.dirtybits.dm.origin.com
fc.qa.chat.dm.origin.com
integration.m.friends.dm.origin.com
account.preprod.origin.com
prometheus.x.origin.com
www.origin.com
account.origin.com
account.preprod.origin.com

Certificate

The complete raw certificate details for m.avatar.dm.origin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nv0yK2eeEaB0FPY6arq
QjjV6bzqWB9+3Joim9HEduBfr0OeYENDpa61Xy5DkRnxkaj6pWcLjjFZxhA8DBDW
okNCQ5YmuUSFvNwUcxBfWOtOeKbQy4eYDB8hppnRFMF9pdiPi198xcNwVEdjI0r8
VhsV/VVF3/00v6XnhuKoMVUR5/nMN1wbG4+h5brkMy0NMaCEhGy0akOEISoDY/Gb
rDkV2jS6s2jdcP/UCMTULLFjBNaYJngoHnSCD4sMXVRD37wPCfkGq1aZHi2fyUnq
zrMfhceN5UjmEIlP0YLaPmHwI6l/QPoUn/NdaOKoLlIw06QfN7CzY4rhH/gQK9y0
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14032898435604214576348041180875562514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.avatar.dm.origin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29095935216218313291515554225316318556131333485276260305381673134018915207917293335575809772715274955586561413353393190034291540142476622750249179991659398080255832413813552578251751635473235981085517252955859404790596824249135583885998926417887722876999295639673692895149898812713488650975120279830613759363559818870356392281313743001797443396809849060864613161008235196990322422566118723416376993210756508002884070553473393163956642943496807342106135543159430497817272658182680795497517830046123462003491418252571929073221206278858456852006310863246031791029884745793232326938236627115068258997432014786400075166821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65948765ea818d04522d4dde6bfa4e6720c24525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.avatar.dm.origin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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