watch.video.api.qa.espn.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:d7:0e:2e:8c:67:c4:85:e7:f2:88:27:a2:b3:97:ca was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=watch.video.api.qa.espn.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:0e:2e:8c:67:c4:85:e7:f2:88:27:a2:b3:97:ca
Serial Number (int): 5104315453623011126760734007399520202
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 69:a8:30:85:af:ee:f8:e6:79:c4:f8:ef:52:85:2c:bf:93:fd:74:1e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e2:eb:98:e8:fa:84:f0:3b:10:44:d6:8e:5f:cd:1a:57:09:4c:21:a3
Fingerprint (sha256): 03:b3:ff:4b:13:d5:bf:8d:73:3c:b2:9d:d7:0b:e3:11:d0:77:f4:1a:d9:3a:0d:83:c9:d6:9e:3b:24:d0:0d:bc

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate watch.video.api.qa.espn.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watch.video.api.qa.espn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watch.video.api.qa.espn.com
watch.auth.api.qa.espn.go.com
artwork.api.qa.espn.com
restrictions.api.qa.espn.com
affiliate.api.qa.espn.com
pcc.api.qa.espn.com
watch.auth.api.qa.espn.com
broadband-qa.espn.go.com
events.api.qa.espn.com

Other certificates including the domain name espn.com

(limited to 100 certificates)
video.disney.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com
espn.com

Certificate

The complete raw certificate details for watch.video.api.qa.espn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGMLLqYlBKxl3dZqamUU
MN8U5BsG3fCxDIIOElpTNZXkVhgX9ofxyFvMi9xJUVKKIrlfDBo+t8I2oR9jCifv
CB70n8UAbVRgAyzBDqS9FQwOOB0ASNFN8W5a7LmX7XbZ5V/mLd1rEW8gaNCDZ5sT
h/V/AZ8VJQuBUMklmm66BtqSWNY91GfLEFA6OJh3P2uyEfkShzFaRbbt9JySKBTa
qqegONCsd/YJtMwKI5VJCsYELrkiCxQEQwFhFwRl3SnDpdMlahMku5nq7GV94JWd
x9l7pebFL+L0fuL6QAFOp75FfypExw/OaYwm3qKuYu3F+pBE4pJTRzfXBxIUiqKD
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5104315453623011126760734007399520202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watch.video.api.qa.espn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23276688372938972722661175481159433809415656358444484857353173208550540598517184960671690278990206723699342849014868779615981870226257798210862041667533272287284269756701708196506451887472682787387081653442784466543386102449874814213517981034182076380231293955098504670607545305790106006416145881928491697932493753505317010528714235334940799887007562326953162843421072259027363124115829830693350183216254863644709770449843160352460551025734338962143372972147345639206430181395606789632822604721725249001676160183330998601690046489850986934461531281614655077855604667619110842037507696923799414482398425508671773639479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69a83085afeef8e679c4f8ef52852cbf93fd741e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.video.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.qa.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restrictions.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcc.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.auth.api.qa.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadband-qa.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.api.qa.espn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d078eeeae0000040300483046022100e0b5989fca5eda4b26ed9e2cbafa7d299a350f46851489f3ccbdf98d0985385a022100d6663bb3a39788107289c3abf61a8d49597b55734e32651b53e49f68a982e3490077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d078eef1a0000040300483046022100d4b006d215438cd4d79daa5431df31d92f91b0eba8408dff0747b1bfa1867041022100f9a1560608867158753955d467aa836abedbc5a2286587964d3c0d2a51ed0855
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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