editions.espn.com

- The Walt Disney Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 65:89:9f:c6:4f:3e:a3:72:8d:e4:48:08:62:d1:bf:f1 was issued on by Entrust, Inc..

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Walt Disney Company

Organization: The Walt Disney Company
State / Province: California
Locality: Burbank
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:89:9f:c6:4f:3e:a3:72:8d:e4:48:08:62:d1:bf:f1
Serial Number (int): 134966612858723974023921718068115521521
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dd:9b:c5:9f:78:2c:be:f9:dd:2b:98:ef:1f:4c:31:f1:77:8d:db:62
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 59:12:81:14:17:db:98:dd:a2:3e:c4:60:fa:07:10:48:a8:5f:1a:dd
Fingerprint (sha256): 0a:93:55:95:ae:62:2a:13:40:fa:99:5f:d0:50:e8:c6:5f:43:98:1e:ba:3c:91:2a:51:28:25:b1:9f:f9:99:84

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate editions.espn.com

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for editions.espn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editions.espn.com
*.api.espn.cl
*.api.espn.co.cr
*.api.espn.co.uk
*.api.espn.com.ar
*.api.espn.com.au
*.api.espn.com.br
*.api.espn.com.co
*.api.espn.com.do
*.api.espn.com.ec
*.api.espn.com.gt
*.api.espn.com.mx
*.api.espn.com.pa
*.api.espn.com.pe
*.api.espn.com.sg
*.api.espn.com.uy
*.api.espn.com.ve
*.api.espn.es
*.api.espn.in
*.api.espn.nl
*.espn.cl
*.espn.co.cr
*.espn.co.uk
*.espn.com
*.espn.com.ar
*.espn.com.au
*.espn.com.br
*.espn.com.co
*.espn.com.do
*.espn.com.ec
*.espn.com.gt
*.espn.com.mx
*.espn.com.pa
*.espn.com.pe
*.espn.com.sg
*.espn.com.uy
*.espn.com.ve
*.espn.es
*.espn.go.com
*.espn.in
*.espn.nl
*.espn.ph
*.fan.api.espn.co.cr
*.fan.api.espn.com.do
*.fan.api.espn.com.ec
*.fan.api.espn.com.gt
*.fan.api.espn.com.pa
*.fan.api.espn.com.pe
*.fan.api.espn.com.sg
*.fan.api.espn.com.uy
*.fan.api.espn.com.ve
*.fan.api.espn.es
*.fan.api.espn.nl
espn.cl
espn.co.cr
espn.co.uk
espn.com
espn.com.ar
espn.com.au
espn.com.br
espn.com.co
espn.com.do
espn.com.ec
espn.com.gt
espn.com.mx
espn.com.pa
espn.com.pe
espn.com.sg
espn.com.uy
espn.com.ve
espn.es
espn.go.com
espn.in
espn.nl
espn.ph
espncricinfo.com
fan.core.api.espn.cl
fan.core.api.espn.co.cr
fan.core.api.espn.co.uk
fan.core.api.espn.com.ar
fan.core.api.espn.com.au
fan.core.api.espn.com.br
fan.core.api.espn.com.co
fan.core.api.espn.com.do
fan.core.api.espn.com.ec
fan.core.api.espn.com.gt
fan.core.api.espn.com.mx
fan.core.api.espn.com.pa
fan.core.api.espn.com.pe
fan.core.api.espn.com.sg
fan.core.api.espn.com.uy
fan.core.api.espn.com.ve
fan.core.api.espn.es
fan.core.api.espn.in
fan.core.api.espn.nl
fan.core.api.espncricinfo.com
secsports.com
www.espncricinfo.com
www.secsports.com
*.fan.api.espn.ph
fan.core.api.espn.ph

Other certificates including the domain name espn.com

(limited to 100 certificates)
video.disney.com
espn.com
www.aws.espn.com
1927-the-diary-of-myles-thomas.espn.com
insider.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
video.disney.com
UCwebn7ext.disney.com
tredire.perf.go.com
cert-00003-cdnedge-bluemix.akamaized.net
assets.espncdn.com
www.aws.espn.com
support.espn.com
cdn.secure.espn.go.com
cert-00003-cdnedge-bluemix.akamaized.net
cert-00003-cdnedge-bluemix.akamaized.net
www.espnqa.com
site.api.espn.com
fillmore.espn.com
watch.video.api.qa.espn.com
fantasyfc.espn.com
*.media.plus.espn.com
fantasy.espn.com
email.axioshq.espn.com
support.espn.com
*.media.plus.espn.com
espn.com
btlink.web.plus.espn.com
internal.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
support.espn.com
affiliates.espn.com
1927-the-diary-of-myles-thomas.espn.com
*.svcs.plus.espn.com
pro.creativearchive.espn.com
affiliates.espn.com
mft.espn.com
beta-shortstop.espn.com
cdn.espnqa.com
iptvhmg026.espn.com
log.go.com
cdn.espnqa.com
www.aws.espn.com
mft.espn.com
editions.espn.com
espnqa.com
assets.espncdn.com
video.disney.com
studioc.espn.com
mobileapp.espn.com
www.espn.com
media.plus.espn.com
affiliates.espn.com
web.plus.espn.com
fantasy.espn.com
go.web.plus.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
UCAEN7.Disney.com
www.espn.com
eventcenter.espn.com
ESPNLMProdCluster01.aws.hosted.espn.com
fantasyfc.espn.com
cdn.secure.espn.go.com
editions.espn.com
dcs7soccernet.us-west-2.aws.internal.espn.com
cdn.espnqa.com
cert-00003-cdnedge-bluemix.akamaized.net
wirelessreg.espn.com
affiliates.espn.com
video.disney.com
channelfinder.espn.com
cert-00003-cdnedge-bluemix.akamaized.net
dcs7deportes.geo.hosted.espn.com
affiliates.espn.com
email.axioshq.espn.com
go.web.plus.espn.com
dcs7deportes.geo.hosted.espn.com
outlook.espn.com
fan.api.espn.com
espn.com
*.media.plus.espn.com
media.video-cdn.espn.com
dmzexpe29d01v.espn.com
fan.core.api.espn.com
media.video-cdn.espn.com
assets.espncdn.com
tredir.espn.com
espn.com
insider.espn.com
log.go.com
sigmgr03.espn.com
*.cms.internal.espn.com
timekeeper.espn.com
aws.dp.hosted.espn.com
watch.video.api.qa.espn.com
espn.com
mft.espn.com
affiliate.disney.espn.com

Certificate

The complete raw certificate details for editions.espn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINvDCCDKSgAwIBAgIQZYmfxk8+o3KN5EgIYtG/8TANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjEwMDQxNzMyMzBaFw0yMzEwMDQxNzMyMjlaMHIxCzAJBgNVBAYTAlVTMRMwEQYD
VQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHEwdCdXJiYW5rMSAwHgYDVQQKExdUaGUg
V2FsdCBEaXNuZXkgQ29tcGFueTEaMBgGA1UEAxMRZWRpdGlvbnMuZXNwbi5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnQgT1kWKNm4zIrgssh85
7d00lDo4swn/03s1elIoKcAwputPnw+rGemo4LeM+4n9bzo4tRVzy4kTOVfhq7J1
XUeerVB5TcbntNEOXCzKojiR+2RLgJlflfXA0U0XH0CSZ4PmcCiZt/ii7u9IILUa
6rvZe6EhmS4k3AjTpRGIS7NR2fDd5JocIEWU5qo1Heqc5rRJYB9x7s0z3Qubr4fr
8AkiWC2udmiDLLS4SS7Z7MdeOEclmTvUf/obtWxDMcikgwf7TUP9hpJFc4xiZGAT
KHjtKJ01P7O42pJWMBdMD/u/bNQDbDKGmFzWQcn4mJaDvS1Gu65GStb12RAKqr11
AgMBAAGjggoDMIIJ/zAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTdm8WfeCy++d0r
mO8fTDHxd43bYjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggr
BgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0
MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1
Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9s
ZXZlbDFrLmNybDCCBw8GA1UdEQSCBwYwggcCghFlZGl0aW9ucy5lc3BuLmNvbYIN
Ki5hcGkuZXNwbi5jbIIQKi5hcGkuZXNwbi5jby5jcoIQKi5hcGkuZXNwbi5jby51
a4IRKi5hcGkuZXNwbi5jb20uYXKCESouYXBpLmVzcG4uY29tLmF1ghEqLmFwaS5l
c3BuLmNvbS5icoIRKi5hcGkuZXNwbi5jb20uY2+CESouYXBpLmVzcG4uY29tLmRv
ghEqLmFwaS5lc3BuLmNvbS5lY4IRKi5hcGkuZXNwbi5jb20uZ3SCESouYXBpLmVz
cG4uY29tLm14ghEqLmFwaS5lc3BuLmNvbS5wYYIRKi5hcGkuZXNwbi5jb20ucGWC
ESouYXBpLmVzcG4uY29tLnNnghEqLmFwaS5lc3BuLmNvbS51eYIRKi5hcGkuZXNw
bi5jb20udmWCDSouYXBpLmVzcG4uZXOCDSouYXBpLmVzcG4uaW6CDSouYXBpLmVz
cG4ubmyCCSouZXNwbi5jbIIMKi5lc3BuLmNvLmNyggwqLmVzcG4uY28udWuCCiou
ZXNwbi5jb22CDSouZXNwbi5jb20uYXKCDSouZXNwbi5jb20uYXWCDSouZXNwbi5j
b20uYnKCDSouZXNwbi5jb20uY2+CDSouZXNwbi5jb20uZG+CDSouZXNwbi5jb20u
ZWOCDSouZXNwbi5jb20uZ3SCDSouZXNwbi5jb20ubXiCDSouZXNwbi5jb20ucGGC
DSouZXNwbi5jb20ucGWCDSouZXNwbi5jb20uc2eCDSouZXNwbi5jb20udXmCDSou
ZXNwbi5jb20udmWCCSouZXNwbi5lc4INKi5lc3BuLmdvLmNvbYIJKi5lc3BuLmlu
ggkqLmVzcG4ubmyCCSouZXNwbi5waIIUKi5mYW4uYXBpLmVzcG4uY28uY3KCFSou
ZmFuLmFwaS5lc3BuLmNvbS5kb4IVKi5mYW4uYXBpLmVzcG4uY29tLmVjghUqLmZh
bi5hcGkuZXNwbi5jb20uZ3SCFSouZmFuLmFwaS5lc3BuLmNvbS5wYYIVKi5mYW4u
YXBpLmVzcG4uY29tLnBlghUqLmZhbi5hcGkuZXNwbi5jb20uc2eCFSouZmFuLmFw
aS5lc3BuLmNvbS51eYIVKi5mYW4uYXBpLmVzcG4uY29tLnZlghEqLmZhbi5hcGku
ZXNwbi5lc4IRKi5mYW4uYXBpLmVzcG4ubmyCB2VzcG4uY2yCCmVzcG4uY28uY3KC
CmVzcG4uY28udWuCCGVzcG4uY29tggtlc3BuLmNvbS5hcoILZXNwbi5jb20uYXWC
C2VzcG4uY29tLmJyggtlc3BuLmNvbS5jb4ILZXNwbi5jb20uZG+CC2VzcG4uY29t
LmVjggtlc3BuLmNvbS5ndIILZXNwbi5jb20ubXiCC2VzcG4uY29tLnBhggtlc3Bu
LmNvbS5wZYILZXNwbi5jb20uc2eCC2VzcG4uY29tLnV5ggtlc3BuLmNvbS52ZYIH
ZXNwbi5lc4ILZXNwbi5nby5jb22CB2VzcG4uaW6CB2VzcG4ubmyCB2VzcG4ucGiC
EGVzcG5jcmljaW5mby5jb22CFGZhbi5jb3JlLmFwaS5lc3BuLmNsghdmYW4uY29y
ZS5hcGkuZXNwbi5jby5jcoIXZmFuLmNvcmUuYXBpLmVzcG4uY28udWuCGGZhbi5j
b3JlLmFwaS5lc3BuLmNvbS5hcoIYZmFuLmNvcmUuYXBpLmVzcG4uY29tLmF1ghhm
YW4uY29yZS5hcGkuZXNwbi5jb20uYnKCGGZhbi5jb3JlLmFwaS5lc3BuLmNvbS5j
b4IYZmFuLmNvcmUuYXBpLmVzcG4uY29tLmRvghhmYW4uY29yZS5hcGkuZXNwbi5j
b20uZWOCGGZhbi5jb3JlLmFwaS5lc3BuLmNvbS5ndIIYZmFuLmNvcmUuYXBpLmVz
cG4uY29tLm14ghhmYW4uY29yZS5hcGkuZXNwbi5jb20ucGGCGGZhbi5jb3JlLmFw
aS5lc3BuLmNvbS5wZYIYZmFuLmNvcmUuYXBpLmVzcG4uY29tLnNnghhmYW4uY29y
ZS5hcGkuZXNwbi5jb20udXmCGGZhbi5jb3JlLmFwaS5lc3BuLmNvbS52ZYIUZmFu
LmNvcmUuYXBpLmVzcG4uZXOCFGZhbi5jb3JlLmFwaS5lc3BuLmlughRmYW4uY29y
ZS5hcGkuZXNwbi5ubIIdZmFuLmNvcmUuYXBpLmVzcG5jcmljaW5mby5jb22CDXNl
Y3Nwb3J0cy5jb22CFHd3dy5lc3BuY3JpY2luZm8uY29tghF3d3cuc2Vjc3BvcnRz
LmNvbYIRKi5mYW4uYXBpLmVzcG4ucGiCFGZhbi5jb3JlLmFwaS5lc3BuLnBoMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYD
VR0gBEUwQzA3BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3
LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwggF+BgorBgEEAdZ5AgQCBIIBbgSC
AWoBaAB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABg6QOZRwA
AAQDAEcwRQIgcjp+ZftL1my58Mk7ko/yJ2F2+giCJfIqne6/bnfUfTUCIQCDPjnc
vNQZGyx2sIyc1QGRCfVXfXfP+lbmHyPx0cOlRAB2ALNzdwfhhFD4Y4bWBancEQlK
eS2xZwwLh9zwAw55NqWaAAABg6QOZRwAAAQDAEcwRQIgOzPERnyLmqvTpBzGLm7q
nhWgdWlwG27X8RjYdNZhgB8CIQD8KrTpzS1pe1oWUpHCfW5ilah/r4FJp1xhtt55
RhmRhAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABg6QOZSYA
AAQDAEcwRQIgP9UAeeVmxAP8iZt/b4KqKD1wF8igtncdWLiQU5O3/e4CIQDRunTf
Es02YATgR5N+MTiT0EDVtBxU96Ux1XSJcat4bDANBgkqhkiG9w0BAQsFAAOCAQEA
qXE2qDeeqrtxOHXoa3CYQ0BsskzBjkdwJFHj9WCAgINs+OWimRSevjGzPhZU/TE3
+b51obBJAuKAg4fZgQw87Xt5k4ds1ai9GEWo4zLPxZi0kuZZRVHXnFdXt+9p2mlC
WksYcmJUbuzXvUDISeLFQXgYOE2acESTqAi9V1tXwKO6EBq3Vw//whQZQKoQxyXZ
qWlJrnlC0k+Jy60CReu+6GjEsHgUIrhSMGU9s9NQArbCOeYxv+KLxSGfGHWpdC4f
LWjNo/qg5kwllXabGQIKQHzwz+IFIq59SyBIKJmrkKKE4LtbamHr+XevrqCYc+B1
ceQPsgLX+1Y+QBX52zqDdw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z0IE9ZFijZuMyK4LLIf
Oe3dNJQ6OLMJ/9N7NXpSKCnAMKbrT58PqxnpqOC3jPuJ/W86OLUVc8uJEzlX4auy
dV1Hnq1QeU3G57TRDlwsyqI4kftkS4CZX5X1wNFNFx9AkmeD5nAombf4ou7vSCC1
Guq72XuhIZkuJNwI06URiEuzUdnw3eSaHCBFlOaqNR3qnOa0SWAfce7NM90Lm6+H
6/AJIlgtrnZogyy0uEku2ezHXjhHJZk71H/6G7VsQzHIpIMH+01D/YaSRXOMYmRg
Eyh47SidNT+zuNqSVjAXTA/7v2zUA2wyhphc1kHJ+JiWg70tRruuRkrW9dkQCqq9
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134966612858723974023921718068115521521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 17:32:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 17:32:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Walt Disney Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'editions.espn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26966194102448589315691980519072698151919817762087011435160305025575091383656948930805951234319380327557365331428099742478727323990926627267063761851206553805862491904749149299211892329385097580236252916948879422840410183978667734727224617447163022190783504697034064344878143838676331605255260492987192798378318170897755972935906359106784778393917425375000544132639817452251750504505035359451750342767561790565388648832336113058795512716504846151302072891565607574863221784127562464946988452704290952738301607572994135855243469637598162285796752145502280993064106435941383915549643120869280869697334114238313225960821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd9bc59f782cbef9dd2b98ef1f4c31f1778ddb62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editions.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espncricinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan.api.espn.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.core.api.espn.ph'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a97136a8379eaabb713875e86b709843406cb24cc18e47702451e3f5608080836cf8e5a299149ebe31b33e1654fd3137f9be75a1b04902e2808387d9810c3ced7b7993876cd5a8bd1845a8e332cfc598b492e6594551d79c5757b7ef69da69425a4b187262546eecd7bd40c849e2c5417818384d9a704493a808bd575b57c0a3ba101ab7570fffc2141940aa10c725d9a96949ae7942d24f89cbad0245ebbee868c4b0781422b85230653db3d35002b6c239e631bfe28bc5219f1875a9742e1f2d68cda3faa0e64c2595769b19020a407cf0cfe20522ae7d4b20482899ab90a284e0bb5b6a61ebf977afaea09873e07571e40fb202d7fb563e4015f9db3a8377