espnqa.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:ce:98:3f:90:c0:01:db:3d:82:08:ea:e2:3e:6d:16 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=espnqa.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ce:98:3f:90:c0:01:db:3d:82:08:ea:e2:3e:6d:16
Serial Number (int): 13035753077354374738444502659952962838
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:0b:15:ef:b7:c3:c1:96:0e:62:04:4d:34:0c:82:0a:92:13:40:b5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 20:6b:05:40:1e:26:8a:bd:f8:ff:48:23:50:59:cd:f9:e0:74:97:a7
Fingerprint (sha256): 03:82:ee:9e:20:5c:8d:16:4d:04:e9:cc:10:47:ff:ed:f1:db:81:fa:82:15:b4:25:fb:ef:03:a3:7c:42:59:ae

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate espnqa.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espnqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espnqa.com
*.espnqa.net
*.fan.api.espnqa.com
*.partnerpub.espnqa.com
*.shortstop.espnqa.com
fan.core.api.espnqa.com
*.api.espnqa.com
watch.auth.api.espnqa.com
site.web.api.espnqa.com
*.core.api.espnqa.com
watch.graph.api.espnqa.com
watch.admin.espnqa.com
watch.product.api.espnqa.com
watch.video.api.espnqa.com
*.espnqa.com
*.espncdn.com
site.mobile.api.espnqa.com

Other certificates including the domain name espnqa.com

(limited to 100 certificates)
espnqa.com
editions.espnqa.com
m.espnqa.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
broadband.espnqa.com
espnqa.com
cdn.espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
espnqa.com
www.espn.com
*.web.plus.espnqa.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
dcs7deportes.geo.hosted.espn.com
espn.com
espnqa.com
espnqa.com
games.espnqa.com
espnqa.com
www.espn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espn.com
www.espn.com
espnqa.com
espnqa.com
tredir.ppe.go.com
espn.com
creativestudio.espnqa.com
cdp-dev-airflow-cluster.aws.dp.hosted.espndev.com
dcs7deportes.geo.hosted.espnqa.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
dcf.espn.com
www.espnqa.com
espn.com
editions.espnqa.com
*.cms.internal.espnqa.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
csr-nonprod3-axis.disney.network
cdn.espnqa.com
espnqa.com
dcf.espn.com
www.espn.com
espnqa.com
dcf.espn.com
www.espnqa.com
www.espn.com
www.espnqa.com
internal.espnqa.com
www.espn.com
espnqa.com
espnqa.com
espn.com
csr-nonprod3-axis.disney.network
dcf.espn.com
www.espnqa.com
www.espnqa.com
www.espn.com
abcfeqa.com
*.api.espnqa.com
dcs7deportes.geo.hosted.espnqa.com
cdn.secure.espn.go.com
www.aws.espn.com
www.espnqa.com
tredir.ppe.go.com
espnqa.com
espnqa.com
cdn.espnqa.com
www.aws.espn.com
www.espnqa.com
www.espn.com
tredir.ppe.go.com
cdn.secure.espn.go.com
r.espnqa.com
www.aws.espn.com
cdn.secure.espn.go.com
cdn.espnqa.com
cdn.espnqa.com
espnqa.com
dev-cdp-nifi-cluster.aws.dp.hosted.espndev.com
www.espnqa.com
cdn.espnqa.com
espn.com

Certificate

The complete raw certificate details for espnqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZY9BhXhlwej5NpyM2Zc
+AUiYQQuBEVCkvs8PA8wCKP+nQLajp3isBwAxa72P4Nte/GLouGRu3jdJprBDBeD
FrSG47nWp9FJg0Y4QgBcGRVkJqGm59CME+u1JvFdGJy9xL3UJnmp3fWfsf0CraoS
XGLZRjC0fn9Vu3PDH+Tlnwa9yw8V0NQqK8czOxnkgmwAV449JJt806a7dZzHE1+X
aqEvDikVqu2swbdNPI+aI1h8Ot3Ibqc+LBTIULTX3kEd/zvQvn1oA8yvZGhMNq9l
JsjdFvXbtxyLJSy1GxlPtwLnk3cr8UPSaznK9ocCMXOcKMEqoJudzhrpbIPxVb9y
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13035753077354374738444502659952962838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espnqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21913312062597355474016382758201710765508224227213966486842310068111204293340668648561943164585322832077519831818106581081457719686980493053587933390448678578306721816914702979061967865387278649675781971218512400866549035599203431969639176784498918908069332677434961252850353634945238127542965366934811403547357632471698116194553955505011583716688053745857800606507300497567430151980373818828066783540776497936587577757424537421665635950766909771084887444093349292916914171893650096380593719194374123952840009365606933458803637666272284665117592160784999133696199492492902986970869391199827836504640507377129260806677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							090b15efb7c3c1960e62044d340c820a921340b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnerpub.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortstop.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.web.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.graph.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.admin.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.product.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espnqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.mobile.api.espnqa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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