*.dice.ad.ea.com

- Electronic Arts, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:9b:8a:5d:6f:fc:95:cc:ee:b5:3f:47:68:c0:ad:59 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
Organization unit: EA Online/Pogo.com
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:9b:8a:5d:6f:fc:95:cc:ee:b5:3f:47:68:c0:ad:59
Serial Number (int): 20746032325249246942735885477605322073
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2d:41:ac:51:8f:f1:5b:e2:8c:67:7f:e1:ef:81:f7:23:6a:31:a5:ea
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 55:d8:a1:7d:17:98:c8:49:e0:96:9b:5f:30:0c:7b:3e:49:5d:5a:32
Fingerprint (sha256): 02:00:c7:c7:44:94:20:02:cb:dc:eb:47:9c:76:e5:f0:d4:73:69:8e:ad:d1:e3:d8:a9:1b:e6:f0:9a:75:a5:76

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.dice.ad.ea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dice.ad.ea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dice.ad.ea.com

Other certificates including the domain name ea.com

(limited to 100 certificates)
stage.stargate.ea.com
ava.ea.com
secure07.stage.lithium.com
ups-dev.darkside.ea.com
firebaseapp.com
social.integration.cimessage.ea.com
testrail02-dev.rws.ad.ea.com
firebaseapp.com
content-test2.ts4.eu.ea.com
studio.japan.ea.com
firebaseapp.com
istoreprod2.ea.com
uat.alert-manager.ea.com
aat.fifa-wwe.ea.com
fs.s1.press1.fwm.ea.com
eac-fisheye.eac.ad.ea.com
o.ssl.fastly.net
firebaseapp.com
o.ssl.fastly.net
lt-sov.ceit.ea.com
sha1.admin.eadp.catalog.ea.com
proxyclick.ea.com
erpebsdev.ea.com
ca1-edge.ea.com
sbo-stage.ea.com
ccs.integration.gameservices.ea.com
www.ea.com
eac-scoop-ufcfb-stage.eac.ad.ea.com
signin.ea.com
syseng-prd-chef01.bio-dub.ea.com
extapps.ea.com
pas.gos.ea.com
www.origin.com
firebaseapp.com
accounts2s.internal.ea.com
www.henrymoulton.com
clouddw.ccm.ea.com
ts3.id1.nucleus.ea.com
services.ea.com
firebaseapp.com
secure06.lithium.com
swtor.staging.checkout.ea.com
int.apis.controltower.ea.com
swarm-whiteshark.dice.ad.ea.com
pas.external.easfc.ea.com
xds-connectts.ea.com
walams.tools.lt.gos.ea.com
accounts.lt.ea.com
utas.stage.s1.ea.com
*.online.ea.com
tos2.integration.ea.com
utas.external.s2.fut.ea.com
balrog-horde-broker-dev1.ea.com
utas.gt.mobile.fut.ea.com
mkacct.id1.nucleus.integration.ea.com
shadowsofthedamned.ea.com
stargate.ea.com
fecs.ea.com
*.int.marketplace.ea.com
prometheus-node-exporter.prod.shield.madden.sdo.ddns.ea.com
gateway.int.ea.com
rest-test1.ts4.eu.ea.com
press.ea.com
signin.ea.com
*.apex.prod.marketplace.ea.com
fb-docker-registry.dice.ad.ea.com
*.ea.com
utas.fos5.fut.ea.com
login.ea.com
telegraf.ccm.ea.com
o.ea.com
eav1045519.eac.ad.ea.com
client.sovprimeaws.itcloud.ea.com
gosredirector.qa.ea.com
mpki-test.ea.com
firebaseapp.com
firebaseapp.com
Pexipconfvmspool.video.ea.com
firebaseapp.com
firebaseapp.com
easo.novafusion.integration.ea.com
ava.ea.com
*.dice.ad.ea.com
yoda.ea.com
utas.eacert3.fut.ea.com
nucleus-pulse.ea.com
leapfrog-ssl-10.gcs-web.com
pctrial.burnoutweb.ea.com
proxy.novafusion.ea.com
fs.s2.lt.fwm.ea.com
techops0030.eqx-ams.ea.com
*.stage.us-east-1.marketplace.ea.com
friends.gs.ea.com
grafana.gs.ea.com
statics.checkout.staging.ea.com
firebaseapp.com
events.ea.com
utas.external.dev.s4.ea.com
chat.dm.origin.com
frostbite.qi.ea.com

Certificate

The complete raw certificate details for *.dice.ad.ea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ9PL6A929D7WkbxnIkM
YnYrd9XDB232i+RG9zSeNETDIy5gOQfqhMX7dpLEulXQlgh+IoOa+Up1ZHjiXD3W
c2qsxS+BT1bQf8h5fKe5AQux4uCARAtMN6QtzebM7ieYj7gQRmyuZlkKkbym0FfD
y8dhU//l9Qoa0IGMMjnOvWFjLZhg7BLiqqsohYrp7TmmtRtjxuefZSyqXIe4fPeI
K+Xfy6s8glcrcFfCpYfwmi7G7BE9WsmQ2OJsftJ3yw4hRYhIpNCTLMk+CqxGCppH
sMg9mTSyd2g6207fYeQbIP30Gx7RCRPfzB0Dyfu728osZLIPW6XBDZCSFjxpghTI
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20746032325249246942735885477605322073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EA Online/Pogo.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dice.ad.ea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23937597992415936031314131872057490642737510556976164408099800094401184764201808963032200049170036212046993958348941336146923807248466647427922366004892502155254601020430595844882786701137727217579457185360100973580760071345029610803330391949486587088257840368829254693977394265917026790404607110195276498556510077314170296041969382651810105024772452865339026972197628881066769026746370139489194049009537992150651010837352259260600897167645561882768573699608036425801318100983157484817277561847991303851866255407167148561006628550711723239077888253052141628236466354739129465266344608559936793677573951658634371188991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41ac518ff15be28c677fe1ef81f7236a31a5ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dice.ad.ea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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